# CVEs published 2008-05-22

19 CVEs were published on May 22, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5962](https://cve.now/CVE-2007-5962.md): Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresigh (no CVSS)
- [CVE-2008-0534](https://cve.now/CVE-2008-0534.md): The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attacker (no CVSS)
- [CVE-2008-0535](https://cve.now/CVE-2008-0535.md): Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before (no CVSS)
- [CVE-2008-0536](https://cve.now/CVE-2008-0536.md): Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Ico (no CVSS)
- [CVE-2008-1159](https://cve.now/CVE-2008-1159.md): Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of service (device restart (no CVSS)
- [CVE-2008-1804](https://cve.now/CVE-2008-1804.md): preprocessors/spp\_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, whic (no CVSS)
- [CVE-2008-2006](https://cve.now/CVE-2008-2006.md): Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service (NULL pointer de (no CVSS)
- [CVE-2008-2053](https://cve.now/CVE-2008-2053.md): Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)\_ES14, 4.1.x before 4.1(1)\_ES11, and 7.x before 7. (no CVSS)
- [CVE-2008-2240](https://cve.now/CVE-2008-2240.md): Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to (no CVSS)
- [CVE-2008-2399](https://cve.now/CVE-2008-2399.md): Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to create or overwrite ar (no CVSS)
- [CVE-2008-2400](https://cve.now/CVE-2008-2400.md): Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain privileges via unknown at (no CVSS)
- [CVE-2008-2410](https://cve.now/CVE-2008-2410.md): Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus Domino before 7.0.3 (no CVSS)
- [CVE-2008-2411](https://cve.now/CVE-2008-2411.md): SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to execute (no CVSS)
- [CVE-2008-2412](https://cve.now/CVE-2008-2412.md): SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2008-2413](https://cve.now/CVE-2008-2413.md): Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-2414](https://cve.now/CVE-2008-2414.md): Cross-site scripting (XSS) vulnerability in send\_email.php in AN Guestbook (ANG) 0.4 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-2415](https://cve.now/CVE-2008-2415.md): Directory traversal vulnerability in template/purpletech/base\_include.php in DigitalHive (aka hive) 2.0 RC2 allows remote attackers to inclu (no CVSS)
- [CVE-2008-2416](https://cve.now/CVE-2008-2416.md): SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter (no CVSS)
- [CVE-2008-2417](https://cve.now/CVE-2008-2417.md): SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.