# CVEs published 2008-05-09

18 CVEs were published on May 9, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1558](https://cve.now/CVE-2003-1558.md): Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code vi (no CVSS)
- [CVE-2008-2123](https://cve.now/CVE-2008-2123.md): Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-2124](https://cve.now/CVE-2008-2124.md): SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL commands via the lg par (no CVSS)
- [CVE-2008-2125](https://cve.now/CVE-2008-2125.md): SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-2126](https://cve.now/CVE-2008-2126.md): Multiple cross-site scripting (XSS) vulnerabilities in Tux CMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS)
- [CVE-2008-2127](https://cve.now/CVE-2008-2127.md): Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-2128](https://cve.now/CVE-2008-2128.md): PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2008-2129](https://cve.now/CVE-2008-2129.md): SQL injection vulnerability in index.php in Galleristic 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-2130](https://cve.now/CVE-2008-2130.md): SQL injection vulnerability in poll\_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2008-2131](https://cve.now/CVE-2008-2131.md): Cross-site scripting (XSS) vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-2132](https://cve.now/CVE-2008-2132.md): SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS)
- [CVE-2008-2133](https://cve.now/CVE-2008-2133.md): Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2008-2134](https://cve.now/CVE-2008-2134.md): The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, vi (no CVSS)
- [CVE-2008-2135](https://cve.now/CVE-2008-2135.md): Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the (1 (no CVSS)
- [CVE-2006-4727](https://cve.now/CVE-2006-4727.md): Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly ot (no CVSS)
- [CVE-2008-2120](https://cve.now/CVE-2008-2120.md): Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 befo (no CVSS)
- [CVE-2008-2121](https://cve.now/CVE-2008-2121.md): The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection (no CVSS)
- [CVE-2008-2122](https://cve.now/CVE-2008-2122.md): IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a port scan, which spawns multiple (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.