# CVEs published 2008-08-12 26 CVEs were published on August 12, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-2926](https://cve.now/CVE-2008-2926.md): The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, do (no CVSS) - [CVE-2008-3003](https://cve.now/CVE-2008-3003.md): Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is config (no CVSS) - [CVE-2008-3004](https://cve.now/CVE-2008-3004.md): Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly (no CVSS) - [CVE-2008-3005](https://cve.now/CVE-2008-3005.md): Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execu (no CVSS) - [CVE-2008-3006](https://cve.now/CVE-2008-3006.md): Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel View (no CVSS) - [CVE-2008-3018](https://cve.now/CVE-2008-3018.md): Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which a (no CVSS) - [CVE-2008-3019](https://cve.now/CVE-2008-3019.md): Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated Post (no CVSS) - [CVE-2008-3020](https://cve.now/CVE-2008-3020.md): Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote (no CVSS) - [CVE-2008-3021](https://cve.now/CVE-2008-3021.md): Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which a (no CVSS) - [CVE-2008-3174](https://cve.now/CVE-2008-3174.md): Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Su (no CVSS) - [CVE-2008-3275](https://cve.now/CVE-2008-3275.md): The (1) real\_lookup and (2) \_\_lookup\_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prev (no CVSS) - [CVE-2008-3460](https://cve.now/CVE-2008-3460.md): WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a (no CVSS) - [CVE-2008-3648](https://cve.now/CVE-2008-3648.md): nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DN (no CVSS) - [CVE-2008-3598](https://cve.now/CVE-2008-3598.md): Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to (no CVSS) - [CVE-2008-3599](https://cve.now/CVE-2008-3599.md): SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2008-3600](https://cve.now/CVE-2008-3600.md): Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register\_globals is enabled, allows re (no CVSS) - [CVE-2008-3601](https://cve.now/CVE-2008-3601.md): SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL commands via the forum (no CVSS) - [CVE-2008-3602](https://cve.now/CVE-2008-3602.md): admin/wr\_admin.php in PHP-Ring Webring System (aka uPHP\_ring\_website) 0.9.1 allows remote attackers to bypass authentication and gain admini (no CVSS) - [CVE-2008-3603](https://cve.now/CVE-2008-3603.md): SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id (no CVSS) - [CVE-2008-3604](https://cve.now/CVE-2008-3604.md): SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parame (no CVSS) - [CVE-2008-3605](https://cve.now/CVE-2008-3605.md): Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attacke (no CVSS) - [CVE-2008-3606](https://cve.now/CVE-2008-3606.md): Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of (no CVSS) - [CVE-2008-3607](https://cve.now/CVE-2008-3607.md): The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via mult (no CVSS) - [CVE-2008-3595](https://cve.now/CVE-2008-3595.md): PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary (no CVSS) - [CVE-2008-3596](https://cve.now/CVE-2008-3596.md): Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the User (no CVSS) - [CVE-2008-3597](https://cve.now/CVE-2008-3597.md): Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a "co (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-08-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.