# CVEs published 2008-05-08

14 CVEs were published on May 8, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2113](https://cve.now/CVE-2008-2113.md): SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the cat\_id pa (no CVSS)
- [CVE-2008-2114](https://cve.now/CVE-2008-2114.md): SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the s (no CVSS)
- [CVE-2008-2115](https://cve.now/CVE-2008-2115.md): Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2008-2116](https://cve.now/CVE-2008-2116.md): Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local (no CVSS)
- [CVE-2008-2117](https://cve.now/CVE-2008-2117.md): Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2008-2118](https://cve.now/CVE-2008-2118.md): SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2007-5001](https://cve.now/CVE-2007-5001.md): Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special (no CVSS)
- [CVE-2007-5498](https://cve.now/CVE-2007-5498.md): The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows l (no CVSS)
- [CVE-2007-6282](https://cve.now/CVE-2007-6282.md): The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packe (no CVSS)
- [CVE-2008-1615](https://cve.now/CVE-2008-1615.md): Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (cras (no CVSS)
- [CVE-2008-1659](https://cve.now/CVE-2008-1659.md): Unspecified vulnerability in HP LDAP-UX vB.04.10 through vB.04.15 allows local users to gain privileges via unknown vectors. (no CVSS)
- [CVE-2008-1669](https://cve.now/CVE-2008-1669.md): Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute (no CVSS)
- [CVE-2008-2042](https://cve.now/CVE-2008-2042.md): The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remote attackers to execu (no CVSS)
- [CVE-2008-2112](https://cve.now/CVE-2008-2112.md): Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.