# CVEs published 2008-05-01

9 CVEs were published on May 1, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1381](https://cve.now/CVE-2008-1381.md): ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitra (no CVSS)
- [CVE-2008-2045](https://cve.now/CVE-2008-2045.md): Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2008-2046](https://cve.now/CVE-2008-2046.md): Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-2047](https://cve.now/CVE-2008-2047.md): Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (no CVSS)
- [CVE-2008-2048](https://cve.now/CVE-2008-2048.md): Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-2049](https://cve.now/CVE-2008-2049.md): The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information via multiple crafted (no CVSS)
- [CVE-2007-6339](https://cve.now/CVE-2007-6339.md): The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force t (no CVSS)
- [CVE-2008-2043](https://cve.now/CVE-2008-2043.md): Multiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to (1) execute ar (no CVSS)
- [CVE-2008-2044](https://cve.now/CVE-2008-2044.md): includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean li (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.