# CVEs published 2008-05-14

43 CVEs were published on May 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1749](https://cve.now/CVE-2008-1749.md): Memory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content Switching Module with SSL (CSM-S) 2.1(2) up to 2.1 (no CVSS)
- [CVE-2008-1943](https://cve.now/CVE-2008-1943.md): Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial (no CVSS)
- [CVE-2008-1944](https://cve.now/CVE-2008-1944.md): Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users (no CVSS)
- [CVE-2008-2214](https://cve.now/CVE-2008-2214.md): Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial (no CVSS)
- [CVE-2008-2215](https://cve.now/CVE-2008-2215.md): Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary fil (no CVSS)
- [CVE-2008-2216](https://cve.now/CVE-2008-2216.md): Unrestricted file upload vulnerability in src/yopy\_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated u (no CVSS)
- [CVE-2008-2217](https://cve.now/CVE-2008-2217.md): Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and (no CVSS)
- [CVE-2008-2218](https://cve.now/CVE-2008-2218.md): Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 (no CVSS)
- [CVE-2008-2219](https://cve.now/CVE-2008-2219.md): Cross-site scripting (XSS) vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-2220](https://cve.now/CVE-2008-2220.md): Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register\_globals is enabl (no CVSS)
- [CVE-2008-2221](https://cve.now/CVE-2008-2221.md): Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unkno (no CVSS)
- [CVE-2008-2222](https://cve.now/CVE-2008-2222.md): SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the user\_id paramet (no CVSS)
- [CVE-2008-2223](https://cve.now/CVE-2008-2223.md): SQL injection vulnerability in group\_posts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-2224](https://cve.now/CVE-2008-2224.md): Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register\_globals is enabled, allow remote attackers to execute arb (no CVSS)
- [CVE-2008-2225](https://cve.now/CVE-2008-2225.md): SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId para (no CVSS)
- [CVE-2008-2226](https://cve.now/CVE-2008-2226.md): Unspecified vulnerability in the export feature in OpenKM before 2.0 allows remote attackers to export arbitrary documents via unspecified v (no CVSS)
- [CVE-2008-2227](https://cve.now/CVE-2008-2227.md): Multiple directory traversal vulnerabilities in PHP-Fusion Forum Rank System 6 allow remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2008-2228](https://cve.now/CVE-2008-2228.md): PHP remote file inclusion vulnerability in portfolio/commentaires/derniers\_commentaires.php in Cyberfolio 7.12, when register\_globals is ena (no CVSS)
- [CVE-2008-2189](https://cve.now/CVE-2008-2189.md): SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat param (no CVSS)
- [CVE-2008-2190](https://cve.now/CVE-2008-2190.md): SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execu (no CVSS)
- [CVE-2008-2191](https://cve.now/CVE-2008-2191.md): SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-2192](https://cve.now/CVE-2008-2192.md): Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP cod (no CVSS)
- [CVE-2008-2193](https://cve.now/CVE-2008-2193.md): PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2008-2194](https://cve.now/CVE-2008-2194.md): SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sort (no CVSS)
- [CVE-2008-2195](https://cve.now/CVE-2008-2195.md): Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrar (no CVSS)
- [CVE-2008-2196](https://cve.now/CVE-2008-2196.md): Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-2197](https://cve.now/CVE-2008-2197.md): SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the histo (no CVSS)
- [CVE-2008-2198](https://cve.now/CVE-2008-2198.md): PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when register\_globals is enab (no CVSS)
- [CVE-2008-2199](https://cve.now/CVE-2008-2199.md): PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register\_globals is enabled, a (no CVSS)
- [CVE-2008-2200](https://cve.now/CVE-2008-2200.md): Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2008-2201](https://cve.now/CVE-2008-2201.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Recipe 1.2 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-2202](https://cve.now/CVE-2008-2202.md): Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-2203](https://cve.now/CVE-2008-2203.md): SQL injection vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary SQL commands via the keywords par (no CVSS)
- [CVE-2008-2204](https://cve.now/CVE-2008-2204.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Search 1.1 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-2205](https://cve.now/CVE-2008-2205.md): SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album paramete (no CVSS)
- [CVE-2008-2206](https://cve.now/CVE-2008-2206.md): Multiple cross-site scripting (XSS) vulnerabilities in Maian Music 1.1 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-2207](https://cve.now/CVE-2008-2207.md): Cross-site scripting (XSS) vulnerability in admin/index.php in Maian Gallery 2.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-2208](https://cve.now/CVE-2008-2208.md): SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords pa (no CVSS)
- [CVE-2008-2209](https://cve.now/CVE-2008-2209.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/header.php in Maian Greeting 2.1 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-2210](https://cve.now/CVE-2008-2210.md): Multiple cross-site scripting (XSS) vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-2211](https://cve.now/CVE-2008-2211.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Guestbook 3.2 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2008-2212](https://cve.now/CVE-2008-2212.md): Multiple cross-site scripting (XSS) vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-2213](https://cve.now/CVE-2008-2213.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/inc/footer.php in Maian Links 3.1 allow remote attackers to inject arbitrary we (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.