# CVEs published 2008-06-04

31 CVEs were published on June 4, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2551](https://cve.now/CVE-2008-2551.md): The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and ex (no CVSS)
- [CVE-2008-1770](https://cve.now/CVE-2008-1770.md): CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and exe (no CVSS)
- [CVE-2008-2055](https://cve.now/CVE-2008-2055.md): Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.1.x before 7.1(2)70, 7.2.x before 7.2(4), and 8.0.x before 8.0(3) (no CVSS)
- [CVE-2008-2056](https://cve.now/CVE-2008-2056.md): Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 and 8.1.x before 8.1(1)1 allows remote attacke (no CVSS)
- [CVE-2008-2057](https://cve.now/CVE-2008-2057.md): The Instant Messenger (IM) inspection engine in Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(4) (no CVSS)
- [CVE-2008-2058](https://cve.now/CVE-2008-2058.md): Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 7.2.x before 7.2(3)2 and 8.0.x before 8.0(2)17 allows remote attack (no CVSS)
- [CVE-2008-2059](https://cve.now/CVE-2008-2059.md): Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plan (no CVSS)
- [CVE-2007-5604](https://cve.now/CVE-2007-5604.md): Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support be (no CVSS)
- [CVE-2007-5605](https://cve.now/CVE-2007-5605.md): Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support b (no CVSS)
- [CVE-2007-5606](https://cve.now/CVE-2007-5606.md): Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support befo (no CVSS)
- [CVE-2007-5607](https://cve.now/CVE-2007-5607.md): Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Suppor (no CVSS)
- [CVE-2007-5608](https://cve.now/CVE-2007-5608.md): The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 all (no CVSS)
- [CVE-2007-5610](https://cve.now/CVE-2007-5610.md): The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 (no CVSS)
- [CVE-2008-0952](https://cve.now/CVE-2008-0952.md): The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0. (no CVSS)
- [CVE-2008-0953](https://cve.now/CVE-2008-0953.md): The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows (no CVSS)
- [CVE-2008-1108](https://cve.now/CVE-2008-1108.md): Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a lon (no CVSS)
- [CVE-2008-1109](https://cve.now/CVE-2008-1109.md): Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION proper (no CVSS)
- [CVE-2008-2401](https://cve.now/CVE-2008-2401.md): The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing fi (no CVSS)
- [CVE-2008-2402](https://cve.now/CVE-2008-2402.md): The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient (no CVSS)
- [CVE-2008-2403](https://cve.now/CVE-2008-2403.md): Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow (no CVSS)
- [CVE-2008-2404](https://cve.now/CVE-2008-2404.md): Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote a (no CVSS)
- [CVE-2008-2405](https://cve.now/CVE-2008-2405.md): Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTT (no CVSS)
- [CVE-2008-2406](https://cve.now/CVE-2008-2406.md): The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentica (no CVSS)
- [CVE-2008-2541](https://cve.now/CVE-2008-2541.md): Multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) in CA eTrust Secure Content Manager 8.0 allow remote attacke (no CVSS)
- [CVE-2008-2550](https://cve.now/CVE-2008-2550.md): Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown i (no CVSS)
- [CVE-2008-1661](https://cve.now/CVE-2008-1661.md): Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute (no CVSS)
- [CVE-2008-1947](https://cve.now/CVE-2008-1947.md): Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject ar (no CVSS, org.apache.tomcat:tomcat · org.apache.tomcat.embed:tomcat-e…)
- [CVE-2008-2119](https://cve.now/CVE-2008-2119.md): Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedantics (no CVSS)
- [CVE-2008-2547](https://cve.now/CVE-2008-2547.md): Stack-based buffer overflow in msiexec.exe 3.1.4000.1823 and 4.5.6001.22159 in Microsoft Windows Installer allows context-dependent attacker (no CVSS)
- [CVE-2008-2548](https://cve.now/CVE-2008-2548.md): Stack-based buffer overflow in the JPEG thumbprint component in the EXIF parser on Motorola cell phones with RAZR firmware allows user-assis (no CVSS)
- [CVE-2008-2549](https://cve.now/CVE-2008-2549.md): Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
