# CVEs published 2008-07-28

22 CVEs were published on July 28, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5400](https://cve.now/CVE-2007-5400.md): Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.1483 might allow remote (no CVSS)
- [CVE-2008-1946](https://cve.now/CVE-2008-1946.md): The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) exp (no CVSS)
- [CVE-2008-3064](https://cve.now/CVE-2008-3064.md): Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12.1675 has unknown imp (no CVSS)
- [CVE-2008-3066](https://cve.now/CVE-2008-3066.md): Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer (no CVSS)
- [CVE-2008-3323](https://cve.now/CVE-2008-3323.md): setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin mirror servers or man (no CVSS)
- [CVE-2008-3349](https://cve.now/CVE-2008-3349.md): Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute ar (no CVSS)
- [CVE-2008-3350](https://cve.now/CVE-2008-3350.md): dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lacking a DHCP lease, or (no CVSS)
- [CVE-2008-3351](https://cve.now/CVE-2008-3351.md): SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2008-3352](https://cve.now/CVE-2008-3352.md): SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2008-3353](https://cve.now/CVE-2008-3353.md): Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-3354](https://cve.now/CVE-2008-3354.md): Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb\_plus) module 0.93 in RunCMS 1.6.1 allow remote attackers to exec (no CVSS)
- [CVE-2008-3355](https://cve.now/CVE-2008-3355.md): SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2008-3339](https://cve.now/CVE-2008-3339.md): search\_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via unspecified vectors that reveal the installa (no CVSS)
- [CVE-2008-3340](https://cve.now/CVE-2008-3340.md): Cross-site scripting (XSS) vulnerability in search\_result.cfm in Jobbex JobSite allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2008-3341](https://cve.now/CVE-2008-3341.md): Multiple SQL injection vulnerabilities in search\_result.cfm in Jobbex JobSite allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-3342](https://cve.now/CVE-2008-3342.md): Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to injec (no CVSS)
- [CVE-2008-3343](https://cve.now/CVE-2008-3343.md): SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows remote attackers to ex (no CVSS)
- [CVE-2008-3344](https://cve.now/CVE-2008-3344.md): Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3 (no CVSS)
- [CVE-2008-3345](https://cve.now/CVE-2008-3345.md): SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10a, when magic\_quotes\_ (no CVSS)
- [CVE-2008-3346](https://cve.now/CVE-2008-3346.md): SQL injection vulnerability in product\_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL commands via the pid param (no CVSS)
- [CVE-2008-3347](https://cve.now/CVE-2008-3347.md): SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows remote attacker (no CVSS)
- [CVE-2008-3348](https://cve.now/CVE-2008-3348.md): Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) allows re (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.