# CVEs published 2008-07-14 26 CVEs were published on July 14, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2003-1559](https://cve.now/CVE-2003-1559.md): Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// (no CVSS) - [CVE-2003-1560](https://cve.now/CVE-2003-1560.md): Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially (no CVSS) - [CVE-2003-1561](https://cve.now/CVE-2003-1561.md): Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to o (no CVSS) - [CVE-2008-3162](https://cve.now/CVE-2008-3162.md): Stack-based buffer overflow in the str\_read\_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause (no CVSS) - [CVE-2008-3163](https://cve.now/CVE-2008-3163.md): Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via (no CVSS) - [CVE-2008-3164](https://cve.now/CVE-2008-3164.md): Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic\_quotes\_gpc is disabled, allows remote attackers to include (no CVSS) - [CVE-2008-3165](https://cve.now/CVE-2008-3165.md): Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic\_quotes\_gpc is disabled, allows remote attacker (no CVSS) - [CVE-2008-3166](https://cve.now/CVE-2008-3166.md): PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register\_globals is enabled, allows re (no CVSS) - [CVE-2008-3167](https://cve.now/CVE-2008-3167.md): Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register\_globals is enabled, allow remote attackers to exec (no CVSS) - [CVE-2008-3168](https://cve.now/CVE-2008-3168.md): The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRN (no CVSS) - [CVE-2008-3169](https://cve.now/CVE-2008-3169.md): Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute (no CVSS) - [CVE-2008-3170](https://cve.now/CVE-2008-3170.md): Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote atta (no CVSS) - [CVE-2008-3171](https://cve.now/CVE-2008-3171.md): Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially s (no CVSS) - [CVE-2008-3172](https://cve.now/CVE-2008-3172.md): Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remot (no CVSS) - [CVE-2008-3173](https://cve.now/CVE-2008-3173.md): Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which co (no CVSS) - [CVE-2008-1588](https://cve.now/CVE-2008-1588.md): Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces (no CVSS) - [CVE-2008-1589](https://cve.now/CVE-2008-1589.md): Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site w (no CVSS) - [CVE-2008-1590](https://cve.now/CVE-2008-1590.md): JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which al (no CVSS) - [CVE-2008-1809](https://cve.now/CVE-2008-1809.md): Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitr (no CVSS) - [CVE-2008-2303](https://cve.now/CVE-2008-2303.md): Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or (no CVSS) - [CVE-2008-2304](https://cve.now/CVE-2008-2304.md): Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers (no CVSS) - [CVE-2008-2317](https://cve.now/CVE-2008-2317.md): WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execu (no CVSS) - [CVE-2008-2318](https://cve.now/CVE-2008-2318.md): The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which al (no CVSS) - [CVE-2008-3159](https://cve.now/CVE-2008-3159.md): Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote a (no CVSS) - [CVE-2008-3160](https://cve.now/CVE-2008-3160.md): Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage (no CVSS) - [CVE-2008-3161](https://cve.now/CVE-2008-3161.md): Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to injec (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-07-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.