# CVEs published 2008-05-29

22 CVEs were published on May 29, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2501](https://cve.now/CVE-2008-2501.md): Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parame (no CVSS)
- [CVE-2008-2502](https://cve.now/CVE-2008-2502.md): Unspecified vulnerability in the web server in eMule X-Ray before 1.4 allows remote attackers to trigger memory corruption via unknown attac (no CVSS)
- [CVE-2008-2503](https://cve.now/CVE-2008-2503.md): Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors. (no CVSS)
- [CVE-2008-2504](https://cve.now/CVE-2008-2504.md): Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-2505](https://cve.now/CVE-2008-2505.md): Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-2506](https://cve.now/CVE-2008-2506.md): Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-2507](https://cve.now/CVE-2008-2507.md): Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arb (no CVSS)
- [CVE-2008-2508](https://cve.now/CVE-2008-2508.md): Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-2509](https://cve.now/CVE-2008-2509.md): SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter. (no CVSS)
- [CVE-2008-2510](https://cve.now/CVE-2008-2510.md): SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-0891](https://cve.now/CVE-2008-0891.md): Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a (no CVSS)
- [CVE-2008-0955](https://cve.now/CVE-2008-0955.md): Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arb (no CVSS)
- [CVE-2008-0958](https://cve.now/CVE-2008-0958.md): Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allo (no CVSS)
- [CVE-2008-0959](https://cve.now/CVE-2008-0959.md): Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2. (no CVSS)
- [CVE-2008-1105](https://cve.now/CVE-2008-1105.md): Heap-based buffer overflow in the receive\_smb\_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute a (no CVSS)
- [CVE-2008-1672](https://cve.now/CVE-2008-1672.md): OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchang (no CVSS)
- [CVE-2008-2054](https://cve.now/CVE-2008-2054.md): Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a cli (no CVSS)
- [CVE-2008-2137](https://cve.now/CVE-2008-2137.md): The (1) sparc\_mmap\_check function in arch/sparc/kernel/sys\_sparc.c and the (2) sparc64\_mmap\_check function in arch/sparc64/kernel/sys\_sparc. (no CVSS)
- [CVE-2008-2157](https://cve.now/CVE-2008-2157.md): robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary commands via an unspecified (no CVSS)
- [CVE-2008-2158](https://cve.now/CVE-2008-2158.md): Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow r (no CVSS)
- [CVE-2008-2499](https://cve.now/CVE-2008-2499.md): Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8. (no CVSS)
- [CVE-2008-2500](https://cve.now/CVE-2008-2500.md): Cross-site scripting (XSS) vulnerability in the MOStlyContent Editor (MOStlyCE) component before 3.0 for Mambo allows remote attackers to in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.