# CVEs published 2008-05-16

34 CVEs were published on May 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2277](https://cve.now/CVE-2008-2277.md): SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-2278](https://cve.now/CVE-2008-2278.md): SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-2279](https://cve.now/CVE-2008-2279.md): Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl\_users table, which allows attackers to gain privileges by reading (no CVSS)
- [CVE-2008-2280](https://cve.now/CVE-2008-2280.md): Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2008-1158](https://cve.now/CVE-2008-1158.md): The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and (no CVSS)
- [CVE-2008-1419](https://cve.now/CVE-2008-1419.md): Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial (no CVSS)
- [CVE-2008-1420](https://cve.now/CVE-2008-1420.md): Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to exe (no CVSS)
- [CVE-2008-1423](https://cve.now/CVE-2008-1423.md): Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to cause a (no CVSS)
- [CVE-2008-1740](https://cve.now/CVE-2008-1740.md): The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and (no CVSS)
- [CVE-2008-1741](https://cve.now/CVE-2008-1741.md): The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and ser (no CVSS)
- [CVE-2008-1742](https://cve.now/CVE-2008-1742.md): Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows rem (no CVSS)
- [CVE-2008-1743](https://cve.now/CVE-2008-1743.md): Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x be (no CVSS)
- [CVE-2008-1744](https://cve.now/CVE-2008-1744.md): The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2( (no CVSS)
- [CVE-2008-1745](https://cve.now/CVE-2008-1745.md): Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (se (no CVSS)
- [CVE-2008-1746](https://cve.now/CVE-2008-1746.md): The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5. (no CVSS)
- [CVE-2008-1747](https://cve.now/CVE-2008-1747.md): Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before (no CVSS)
- [CVE-2008-1748](https://cve.now/CVE-2008-1748.md): Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) (no CVSS)
- [CVE-2008-2009](https://cve.now/CVE-2008-2009.md): Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2008-2136](https://cve.now/CVE-2008-2136.md): Memory leak in the ipip6\_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attack (no CVSS)
- [CVE-2008-2165](https://cve.now/CVE-2008-2165.md): Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Captive Portal 5.3 allows (no CVSS)
- [CVE-2008-2263](https://cve.now/CVE-2008-2263.md): SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-2264](https://cve.now/CVE-2008-2264.md): Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-2265](https://cve.now/CVE-2008-2265.md): SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the ida paramete (no CVSS)
- [CVE-2008-2266](https://cve.now/CVE-2008-2266.md): uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary fi (no CVSS)
- [CVE-2008-2267](https://cve.now/CVE-2008-2267.md): Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote (no CVSS)
- [CVE-2008-2268](https://cve.now/CVE-2008-2268.md): Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attackers to redirect users t (no CVSS)
- [CVE-2008-2269](https://cve.now/CVE-2008-2269.md): AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by setting the gastracker\_ (no CVSS)
- [CVE-2008-2270](https://cve.now/CVE-2008-2270.md): Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2008-2271](https://cve.now/CVE-2008-2271.md): The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other (no CVSS)
- [CVE-2008-2272](https://cve.now/CVE-2008-2272.md): Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1. (no CVSS)
- [CVE-2008-2273](https://cve.now/CVE-2008-2273.md): Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenti (no CVSS)
- [CVE-2008-2274](https://cve.now/CVE-2008-2274.md): Cross-site scripting (XSS) vulnerability in the sr\_feuser\_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 e (no CVSS)
- [CVE-2008-2275](https://cve.now/CVE-2008-2275.md): Unspecified vulnerability in sr\_feuser\_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 (no CVSS)
- [CVE-2008-2276](https://cve.now/CVE-2008-2276.md): Cross-site request forgery (CSRF) vulnerability in manage\_user\_create.php in Mantis 1.1.1 allows remote attackers to create new administrati (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.