# CVEs published 2008-12-11 18 CVEs were published on December 11, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2006-7235](https://cve.now/CVE-2006-7235.md): Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1) multiple STOR (aka P (no CVSS) - [CVE-2008-4418](https://cve.now/CVE-2008-4418.md): Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown (no CVSS) - [CVE-2008-4844](https://cve.now/CVE-2008-4844.md): Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 (no CVSS) - [CVE-2008-5415](https://cve.now/CVE-2008-5415.md): The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2008-5421](https://cve.now/CVE-2008-5421.md): The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a (no CVSS) - [CVE-2008-5422](https://cve.now/CVE-2008-5422.md): Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray adminis (no CVSS) - [CVE-2008-5423](https://cve.now/CVE-2008-5423.md): Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, whic (no CVSS) - [CVE-2008-5424](https://cve.now/CVE-2008-5424.md): The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed (no CVSS) - [CVE-2008-5425](https://cve.now/CVE-2008-5425.md): ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages (no CVSS) - [CVE-2008-5426](https://cve.now/CVE-2008-5426.md): Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e- (no CVSS) - [CVE-2008-5427](https://cve.now/CVE-2008-5427.md): Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and (no CVSS) - [CVE-2008-5428](https://cve.now/CVE-2008-5428.md): Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages (no CVSS) - [CVE-2008-5429](https://cve.now/CVE-2008-5429.md): Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages (no CVSS) - [CVE-2008-5431](https://cve.now/CVE-2008-5431.md): Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command, (2) a long LIST comm (no CVSS) - [CVE-2008-5432](https://cve.now/CVE-2008-5432.md): Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote atta (no CVSS) - [CVE-2008-5433](https://cve.now/CVE-2008-5433.md): Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2008-5434](https://cve.now/CVE-2008-5434.md): Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands vi (no CVSS) - [CVE-2008-5435](https://cve.now/CVE-2008-5435.md): Cross-site scripting (XSS) vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-12-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.