# CVEs published 2008-05-02

11 CVEs were published on May 2, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2063](https://cve.now/CVE-2008-2063.md): SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL commands via the category p (no CVSS)
- [CVE-2008-2064](https://cve.now/CVE-2008-2064.md): Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fundamental design flaw (no CVSS)
- [CVE-2008-2065](https://cve.now/CVE-2008-2065.md): SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-2066](https://cve.now/CVE-2008-2066.md): Cross-site scripting (XSS) vulnerability in bb\_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-2067](https://cve.now/CVE-2008-2067.md): SQL injection vulnerability in bb\_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands via the whatus paramete (no CVSS)
- [CVE-2008-2068](https://cve.now/CVE-2008-2068.md): Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vec (no CVSS)
- [CVE-2008-2069](https://cve.now/CVE-2008-2069.md): Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in (no CVSS)
- [CVE-2008-2052](https://cve.now/CVE-2008-2052.md): Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and (no CVSS)
- [CVE-2008-1294](https://cve.now/CVE-2008-1294.md): Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT\_CPU to 0 until after the change is (no CVSS)
- [CVE-2008-1375](https://cve.now/CVE-2008-1375.md): Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows l (no CVSS)
- [CVE-2008-1675](https://cve.now/CVE-2008-1675.md): The bdx\_ioctl\_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain informatio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.