# CVEs published 2008-06-05

16 CVEs were published on June 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2559](https://cve.now/CVE-2008-2559.md): Integer overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute arbitrary code via a malformed packet to TCP p (no CVSS)
- [CVE-2008-2554](https://cve.now/CVE-2008-2554.md): Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to t (no CVSS)
- [CVE-2008-2555](https://cve.now/CVE-2008-2555.md): SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter. (no CVSS)
- [CVE-2008-2556](https://cve.now/CVE-2008-2556.md): SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-2557](https://cve.now/CVE-2008-2557.md): Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2008-2558](https://cve.now/CVE-2008-2558.md): CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers (no CVSS)
- [CVE-2007-5671](https://cve.now/CVE-2007-5671.md): HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE (no CVSS)
- [CVE-2008-0967](https://cve.now/CVE-2008-0967.md): Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMw (no CVSS)
- [CVE-2008-1518](https://cve.now/CVE-2008-1518.md): Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain priv (no CVSS)
- [CVE-2008-2097](https://cve.now/CVE-2008-2097.md): Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via (no CVSS)
- [CVE-2008-2100](https://cve.now/CVE-2008-2100.md): Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE (no CVSS)
- [CVE-2008-2231](https://cve.now/CVE-2008-2231.md): SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R\_2\_5\_0\_94 and earlier allows remote at (no CVSS)
- [CVE-2008-2542](https://cve.now/CVE-2008-2542.md): Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote attack (no CVSS)
- [CVE-2008-2543](https://cve.now/CVE-2008-2543.md): The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP por (no CVSS)
- [CVE-2008-2552](https://cve.now/CVE-2008-2552.md): Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a den (no CVSS)
- [CVE-2008-2553](https://cve.now/CVE-2008-2553.md): Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R\_2\_5\_0\_94 and earlier all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-06-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.