# CVEs published 2008-07-08

15 CVEs were published on July 8, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0085](https://cve.now/CVE-2008-0085.md): SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engi (no CVSS)
- [CVE-2008-0086](https://cve.now/CVE-2008-0086.md): Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSD (no CVSS)
- [CVE-2008-0106](https://cve.now/CVE-2008-0106.md): Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute (no CVSS)
- [CVE-2008-0107](https://cve.now/CVE-2008-0107.md): Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, (no CVSS)
- [CVE-2008-1435](https://cve.now/CVE-2008-1435.md): Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-1447](https://cve.now/CVE-2008-1447.md): The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 (no CVSS)
- [CVE-2008-1454](https://cve.now/CVE-2008-1454.md): Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct (no CVSS)
- [CVE-2008-2247](https://cve.now/CVE-2008-2247.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2008-2248](https://cve.now/CVE-2008-2248.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2008-2809](https://cve.now/CVE-2008-2809.md): Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscape 9.0, and other Moz (no CVSS)
- [CVE-2008-3069](https://cve.now/CVE-2008-3069.md): Multiple cross-site scripting (XSS) vulnerabilities in MyBB before 1.2.13 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-3070](https://cve.now/CVE-2008-3070.md): Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user\['lang (no CVSS)
- [CVE-2008-3071](https://cve.now/CVE-2008-3071.md): Directory traversal vulnerability in inc/class\_language.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $lang (no CVSS)
- [CVE-2008-3072](https://cve.now/CVE-2008-3072.md): Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random (no CVSS)
- [CVE-2008-3073](https://cve.now/CVE-2008-3073.md): Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.