# CVEs published 2008-05-12

24 CVEs were published on May 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1803](https://cve.now/CVE-2008-1803.md): Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unkno (no CVSS)
- [CVE-2008-2004](https://cve.now/CVE-2008-2004.md): The drive\_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read (no CVSS)
- [CVE-2008-2159](https://cve.now/CVE-2008-2159.md): Microsoft Internet Explorer 7 can save encrypted pages in the cache even when the DisableCachingOfSSLPages registry setting is enabled, whic (no CVSS)
- [CVE-2008-2160](https://cve.now/CVE-2008-2160.md): Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execu (no CVSS)
- [CVE-2008-2161](https://cve.now/CVE-2008-2161.md): Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-2162](https://cve.now/CVE-2008-2162.md): Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-2148](https://cve.now/CVE-2008-2148.md): The utimensat system call (sys\_utimensat) in Linux kernel 2.6.22 and other versions before 2.6.25.3 does not check file permissions when cer (no CVSS)
- [CVE-2008-2149](https://cve.now/CVE-2008-2149.md): Stack-based buffer overflow in the searchwn function in Wordnet 2.0, 2.1, and 3.0 might allow context-dependent attackers to execute arbitra (no CVSS)
- [CVE-2008-2146](https://cve.now/CVE-2008-2146.md): wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH\_INFO ($PHP\_SELF), which allows remot (no CVSS)
- [CVE-2008-2147](https://cve.now/CVE-2008-2147.md): Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under (no CVSS)
- [CVE-2008-2142](https://cve.now/CVE-2008-2142.md): Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, (no CVSS)
- [CVE-2008-2143](https://cve.now/CVE-2008-2143.md): Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might c (no CVSS)
- [CVE-2008-2144](https://cve.now/CVE-2008-2144.md): Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of servi (no CVSS)
- [CVE-2008-2145](https://cve.now/CVE-2008-2145.md): Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execu (no CVSS)
- [CVE-2008-2139](https://cve.now/CVE-2008-2139.md): The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, (no CVSS)
- [CVE-2008-2140](https://cve.now/CVE-2008-2140.md): Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to re (no CVSS)
- [CVE-2008-1677](https://cve.now/CVE-2008-1677.md): Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a deni (no CVSS)
- [CVE-2008-1801](https://cve.now/CVE-2008-1801.md): Integer underflow in the iso\_recv\_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and po (no CVSS)
- [CVE-2008-1802](https://cve.now/CVE-2008-1802.md): Buffer overflow in the process\_redirect\_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remot (no CVSS)
- [CVE-2008-1880](https://cve.now/CVE-2008-1880.md): The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISC\_PASSWORD environment variable before starting Fir (no CVSS)
- [CVE-2008-2070](https://cve.now/CVE-2008-2070.md): The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XSS protection and inje (no CVSS)
- [CVE-2008-2071](https://cve.now/CVE-2008-2071.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11. (no CVSS)
- [CVE-2008-2085](https://cve.now/CVE-2008-2085.md): Multiple stack-based buffer overflows in the (1) get\_remote\_ip\_media and (2) get\_remote\_ipv6\_media functions in call.cpp in SIPp 3.1 allow r (no CVSS)
- [CVE-2008-2138](https://cve.now/CVE-2008-2138.md): Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.