# CVEs published 2008-11-12

11 CVEs were published on November 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4029](https://cve.now/CVE-2008-4029.md): Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensi (no CVSS)
- [CVE-2008-4033](https://cve.now/CVE-2008-4033.md): Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, a (no CVSS)
- [CVE-2008-4037](https://cve.now/CVE-2008-4037.md): Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB (no CVSS)
- [CVE-2008-5043](https://cve.now/CVE-2008-5043.md): Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authe (no CVSS)
- [CVE-2008-5044](https://cve.now/CVE-2008-5044.md): Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-thread (no CVSS)
- [CVE-2008-5041](https://cve.now/CVE-2008-5041.md): Sweex RO002 Router with firmware Ts03-072 has "rdc123" as its default password for the "rdc123" account, which makes it easier for remote at (no CVSS)
- [CVE-2008-5042](https://cve.now/CVE-2008-5042.md): Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct reques (no CVSS)
- [CVE-2008-5037](https://cve.now/CVE-2008-5037.md): SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid (no CVSS)
- [CVE-2008-5038](https://cve.now/CVE-2008-5038.md): Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2 f (no CVSS)
- [CVE-2008-5039](https://cve.now/CVE-2008-5039.md): Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2008-5040](https://cve.now/CVE-2008-5040.md): Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum\_login and (2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.