# CVEs published 2008-05-21

17 CVEs were published on May 21, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1104](https://cve.now/CVE-2008-1104.md): Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2008-1660](https://cve.now/CVE-2008-1660.md): Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via (no CVSS)
- [CVE-2008-1948](https://cve.now/CVE-2008-1948.md): The \_gnutls\_server\_name\_recv\_params function in lib/ext\_server\_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly c (no CVSS)
- [CVE-2008-1949](https://cve.now/CVE-2008-1949.md): The \_gnutls\_recv\_client\_kx\_message function in lib/gnutls\_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Clien (no CVSS)
- [CVE-2008-1950](https://cve.now/CVE-2008-1950.md): Integer signedness error in the \_gnutls\_ciphertext2compressed function in lib/gnutls\_cipher.c in libgnutls in GnuTLS before 2.2.4 allows rem (no CVSS)
- [CVE-2008-2241](https://cve.now/CVE-2008-2241.md): Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbit (no CVSS)
- [CVE-2008-2242](https://cve.now/CVE-2008-2242.md): Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to exe (no CVSS)
- [CVE-2008-2357](https://cve.now/CVE-2008-2357.md): Stack-based buffer overflow in the split\_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allow (no CVSS)
- [CVE-2008-2390](https://cve.now/CVE-2008-2390.md): Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to (no CVSS)
- [CVE-2008-2391](https://cve.now/CVE-2008-2391.md): SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pageindex (aka data page nu (no CVSS)
- [CVE-2008-2392](https://cve.now/CVE-2008-2392.md): Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute (no CVSS)
- [CVE-2008-2393](https://cve.now/CVE-2008-2393.md): SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2008-2394](https://cve.now/CVE-2008-2394.md): Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands via the (1) cid param (no CVSS)
- [CVE-2008-2395](https://cve.now/CVE-2008-2395.md): SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-2396](https://cve.now/CVE-2008-2396.md): PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register\_globals is enabled, allo (no CVSS)
- [CVE-2008-2397](https://cve.now/CVE-2008-2397.md): Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-2398](https://cve.now/CVE-2008-2398.md): Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.