# CVEs published 2008-07-17

12 CVEs were published on July 17, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1665](https://cve.now/CVE-2008-1665.md): Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, an (no CVSS)
- [CVE-2008-1666](https://cve.now/CVE-2008-1666.md): Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact and attack vectors, p (no CVSS)
- [CVE-2008-2232](https://cve.now/CVE-2008-2232.md): The expand\_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname. (no CVSS)
- [CVE-2008-2933](https://cve.now/CVE-2008-2933.md): Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple t (no CVSS)
- [CVE-2008-3198](https://cve.now/CVE-2008-3198.md): Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as d (no CVSS)
- [CVE-2008-3199](https://cve.now/CVE-2008-3199.md): Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via (no CVSS)
- [CVE-2008-3200](https://cve.now/CVE-2008-3200.md): SQL injection vulnerability in vlc\_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-3201](https://cve.now/CVE-2008-3201.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-3202](https://cve.now/CVE-2008-3202.md): Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2008-3203](https://cve.now/CVE-2008-3203.md): js/pages/pages\_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete (no CVSS)
- [CVE-2008-3204](https://cve.now/CVE-2008-3204.md): SQL injection vulnerability in tops\_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2008-3205](https://cve.now/CVE-2008-3205.md): Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.