# Vulnerabilities published in 2008


- [CVE-2008-3758](https://insights.sbomify.com/CVE-2008-3758/): Cross-site scripting in lussumo:vanilla (medium 4.3)
- [CVE-2008-3757](https://insights.sbomify.com/CVE-2008-3757/): SQL injection in yourfreeworld:forced matrix script (high 7.5)
- [CVE-2008-3756](https://insights.sbomify.com/CVE-2008-3756/): SQL injection in yourfreeworld:viral marketing script (high 7.5)
- [CVE-2008-3755](https://insights.sbomify.com/CVE-2008-3755/): SQL injection in yourfreeworld:classifieds (high 7.5)
- [CVE-2008-3754](https://insights.sbomify.com/CVE-2008-3754/): SQL injection in yourfreeworld:stylish text ads script (high 7.5)
- [CVE-2008-3753](https://insights.sbomify.com/CVE-2008-3753/): SQL injection in yourfreeworld:programs rating script (high 7.5)
- [CVE-2008-3752](https://insights.sbomify.com/CVE-2008-3752/): SQL injection in yourfreeworld:ad-exchange script (high 7.5)
- [CVE-2008-3751](https://insights.sbomify.com/CVE-2008-3751/): SQL injection in yourfreeworld:short url and url tracker script (high 7.5)
- [CVE-2008-3750](https://insights.sbomify.com/CVE-2008-3750/): SQL injection in yourfreeworld:url rotator script (high 7.5)
- [CVE-2008-3749](https://insights.sbomify.com/CVE-2008-3749/): SQL injection in yourfreeworld:banner management script (high 7.5)
- [CVE-2008-3748](https://insights.sbomify.com/CVE-2008-3748/): SQL injection in lbstone:active php bookmarks (high 7.5)
- [CVE-2008-3747](https://insights.sbomify.com/CVE-2008-3747/): Weak cryptography in wordpress:wordpress (high 7.5)
- [CVE-2008-3746](https://insights.sbomify.com/CVE-2008-3746/): Null dereference in webdav:neon (medium 4.3)
- [CVE-2008-3745](https://insights.sbomify.com/CVE-2008-3745/): Missing authorization in drupal:drupal (medium 5.5)
- [CVE-2008-3744](https://insights.sbomify.com/CVE-2008-3744/): Cross-site request forgery in drupal:drupal (medium 5.8)
- [CVE-2008-3743](https://insights.sbomify.com/CVE-2008-3743/): Cross-site request forgery in drupal:drupal (medium 5.8)
- [CVE-2008-3742](https://insights.sbomify.com/CVE-2008-3742/): File upload in drupal:drupal (medium 6.5)
- [CVE-2008-3741](https://insights.sbomify.com/CVE-2008-3741/): Cross-site scripting in drupal:drupal (low 3.5)
- [CVE-2008-3740](https://insights.sbomify.com/CVE-2008-3740/): Cross-site scripting in drupal:drupal (medium 4.3)
- [CVE-2008-3739](https://insights.sbomify.com/CVE-2008-3739/): Cross-site scripting in spacetag:lacoodast (medium 4.3)
- [CVE-2008-3738](https://insights.sbomify.com/CVE-2008-3738/): Auth bypass in spacetag:lacoodast (critical 9.1)
- [CVE-2008-3737](https://insights.sbomify.com/CVE-2008-3737/): Code injection in spacetag:lacoodast (critical 10.0)
- [CVE-2008-3736](https://insights.sbomify.com/CVE-2008-3736/): Cross-site request forgery in spacetag:lacoodast (medium 6.0)
- [CVE-2008-3735](https://insights.sbomify.com/CVE-2008-3735/): Cross-site scripting in phpizabi:phpizabi (medium 4.3)
- [CVE-2008-3734](https://insights.sbomify.com/CVE-2008-3734/): Memory corruption in ipswitch:ws ftp home (critical 9.3)
- [CVE-2008-3733](https://insights.sbomify.com/CVE-2008-3733/): Memory corruption in eo-video:eo-video (critical 9.3)
- [CVE-2008-3732](https://insights.sbomify.com/CVE-2008-3732/): Integer overflow in videolan:vlc media player (critical 9.3)
- [CVE-2008-3731](https://insights.sbomify.com/CVE-2008-3731/): Denial of service in solarwinds:serv-u file server (medium 4.0)
- [CVE-2008-3730](https://insights.sbomify.com/CVE-2008-3730/): Cross-site scripting in nordicwind:noah (medium 4.3)
- [CVE-2008-3729](https://insights.sbomify.com/CVE-2008-3729/): Auth bypass in microworld technologies:mailscan (high 7.5)
- [CVE-2008-3728](https://insights.sbomify.com/CVE-2008-3728/): Information disclosure in microworld technologies:mailscan (medium 5.0)
- [CVE-2008-3727](https://insights.sbomify.com/CVE-2008-3727/): Path traversal in microworld technologies:mailscan (medium 5.0)
- [CVE-2008-3726](https://insights.sbomify.com/CVE-2008-3726/): Cross-site scripting in microworld technologies:mailscan (medium 4.3)
- [CVE-2008-3725](https://insights.sbomify.com/CVE-2008-3725/): SQL injection in yourfreeworld:ad board script (high 7.5)
- [CVE-2008-3724](https://insights.sbomify.com/CVE-2008-3724/): SQL injection in papoo:papoo (high 7.5)
- [CVE-2008-3723](https://insights.sbomify.com/CVE-2008-3723/): Path traversal in phpizabi:phpizabi (medium 6.3)
- [CVE-2008-3722](https://insights.sbomify.com/CVE-2008-3722/): SQL injection in fipsasp:fipscms (high 7.5)
- [CVE-2008-3721](https://insights.sbomify.com/CVE-2008-3721/): Code injection in deeemm:dmcms (high 7.5)
- [CVE-2008-3720](https://insights.sbomify.com/CVE-2008-3720/): SQL injection in deeemm:dmcms (high 7.5)
- [CVE-2008-3719](https://insights.sbomify.com/CVE-2008-3719/): SQL injection in scripts-for-sites:affiliate directory (high 7.5)
- [CVE-2008-3718](https://insights.sbomify.com/CVE-2008-3718/): SQL injection in cyberbb:cyberbb (medium 6.5)
- [CVE-2008-3717](https://insights.sbomify.com/CVE-2008-3717/): Missing authorization in harmoni:harmoni (medium 5.0)
- [CVE-2008-3716](https://insights.sbomify.com/CVE-2008-3716/): Cross-site request forgery in harmoni:harmoni (medium 6.0)
- [CVE-2008-3715](https://insights.sbomify.com/CVE-2008-3715/): Cross-site scripting in flexcms:flexcms (low 2.6)
- [CVE-2008-3714](https://insights.sbomify.com/CVE-2008-3714/): Cross-site scripting in awstats:awstats (medium 4.3)
- [CVE-2008-3713](https://insights.sbomify.com/CVE-2008-3713/): SQL injection in phpbasket:phpbasket (high 7.5)
- [CVE-2008-3712](https://insights.sbomify.com/CVE-2008-3712/): Cross-site scripting in mambo:mambo (low 2.6)
- [CVE-2008-3711](https://insights.sbomify.com/CVE-2008-3711/): SQL injection in phparcadescript:phparcadescript (high 7.5)
- [CVE-2008-3710](https://insights.sbomify.com/CVE-2008-3710/): Path traversal in hotscripts:cyboards php lite (medium 5.1)
- [CVE-2008-3709](https://insights.sbomify.com/CVE-2008-3709/): Cross-site scripting in hotscripts:cyboards php lite (medium 4.3)
- [CVE-2008-3708](https://insights.sbomify.com/CVE-2008-3708/): Path traversal in dotcms:dotcms (medium 4.3)
- [CVE-2008-3707](https://insights.sbomify.com/CVE-2008-3707/): Code injection in hotscripts:cyboards php lite (high 7.5)
- [CVE-2008-3706](https://insights.sbomify.com/CVE-2008-3706/): SQL injection in zeeways:zeejobsite (high 7.5)
- [CVE-2008-3705](https://insights.sbomify.com/CVE-2008-3705/): Memory corruption in echovnc:echovnc (high 7.5)
- [CVE-2008-3704](https://insights.sbomify.com/CVE-2008-3704/): Memory corruption in microsoft:visual basic (critical 9.3)
- [CVE-2008-3703](https://insights.sbomify.com/CVE-2008-3703/): Auth bypass in symantec:veritas storage foundation (critical 10.0)
- [CVE-2008-3702](https://insights.sbomify.com/CVE-2008-3702/): Memory corruption in jcomsoft:anigif (critical 9.3)
- [CVE-2008-3701](https://insights.sbomify.com/CVE-2008-3701/): SQL injection in kayako:supportsuite (medium 6.5)
- [CVE-2008-3700](https://insights.sbomify.com/CVE-2008-3700/): Cross-site scripting in kayako:supportsuite (medium 4.3)
- [CVE-2008-3699](https://insights.sbomify.com/CVE-2008-3699/): Race condition in amarok:amarok (low 3.3)
- [CVE-2008-3698](https://insights.sbomify.com/CVE-2008-3698/): Privilege escalation in vmware:ace (high 7.2)
- [CVE-2008-3697](https://insights.sbomify.com/CVE-2008-3697/): Denial of service in vmware:server (medium 5.0)
- [CVE-2008-3696](https://insights.sbomify.com/CVE-2008-3696/): Other in vmware:ace (critical 10.0)
- [CVE-2008-3695](https://insights.sbomify.com/CVE-2008-3695/): Other in vmware:ace (critical 10.0)
- [CVE-2008-3694](https://insights.sbomify.com/CVE-2008-3694/): Other in vmware:ace (critical 10.0)
- [CVE-2008-3693](https://insights.sbomify.com/CVE-2008-3693/): Other in vmware:ace (critical 10.0)
- [CVE-2008-3692](https://insights.sbomify.com/CVE-2008-3692/): Other in vmware:ace (critical 10.0)
- [CVE-2008-3691](https://insights.sbomify.com/CVE-2008-3691/): Other in vmware:ace (critical 10.0)
- [CVE-2008-3688](https://insights.sbomify.com/CVE-2008-3688/): Denial of service in havp:http antivirus proxy (high 7.5)
- [CVE-2008-3687](https://insights.sbomify.com/CVE-2008-3687/): Memory corruption in xen:xen (medium 6.8)
- [CVE-2008-3686](https://insights.sbomify.com/CVE-2008-3686/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2008-3685](https://insights.sbomify.com/CVE-2008-3685/): Path traversal in emc:documentum applicationxtender workflow manager (critical 10.0)
- [CVE-2008-3684](https://insights.sbomify.com/CVE-2008-3684/): Memory corruption in emc:documentum applicationxtender (critical 10.0)
- [CVE-2008-3683](https://insights.sbomify.com/CVE-2008-3683/): Denial of service in sun:java system web proxy server (medium 5.0)
- [CVE-2008-3682](https://insights.sbomify.com/CVE-2008-3682/): SQL injection in ypninc:php realty (medium 6.8)
- [CVE-2008-3681](https://insights.sbomify.com/CVE-2008-3681/): Auth bypass in joomla:com user (high 7.5)
- [CVE-2008-3680](https://insights.sbomify.com/CVE-2008-3680/): Null dereference in flagship industries:ventrilo (medium 5.0)
- [CVE-2008-3679](https://insights.sbomify.com/CVE-2008-3679/): Cross-site scripting in idevspot:phplinkexchange (medium 4.3)
- [CVE-2008-3678](https://insights.sbomify.com/CVE-2008-3678/): Cross-site scripting in damian hickey:freeway (medium 4.3)
- [CVE-2008-3677](https://insights.sbomify.com/CVE-2008-3677/): Path traversal in openfreeway:freeway (medium 6.8)
- [CVE-2008-3676](https://insights.sbomify.com/CVE-2008-3676/): Denial of service in hmailserver:hmailserver (medium 4.3)
- [CVE-2008-3675](https://insights.sbomify.com/CVE-2008-3675/): Path traversal in gelatocms:gelatocms (medium 5.0)
- [CVE-2008-3674](https://insights.sbomify.com/CVE-2008-3674/): SQL injection in pozscripts:tubeguru video sharing script (high 7.5)
- [CVE-2008-3673](https://insights.sbomify.com/CVE-2008-3673/): SQL injection in pozscripts:classified ads (high 7.5)
- [CVE-2008-3672](https://insights.sbomify.com/CVE-2008-3672/): SQL injection in pozscripts:classified ads (high 7.5)
- [CVE-2008-3671](https://insights.sbomify.com/CVE-2008-3671/): Weak cryptography in acronis:true image echo server (medium 5.0)
- [CVE-2008-3670](https://insights.sbomify.com/CVE-2008-3670/): SQL injection in articlefriendly:article friendly (medium 6.8)
- [CVE-2008-3669](https://insights.sbomify.com/CVE-2008-3669/): SQL injection in zeescripts:zeereviews (high 7.5)
- [CVE-2008-3668](https://insights.sbomify.com/CVE-2008-3668/): Cross-site scripting in marcello brandao:yogurt social network module (medium 4.3)
- [CVE-2008-3667](https://insights.sbomify.com/CVE-2008-3667/): Memory corruption in maxthon:maxthon browser (medium 6.8)
- [CVE-2008-3666](https://insights.sbomify.com/CVE-2008-3666/): Denial of service in sun:opensolaris (high 7.1)
- [CVE-2008-3664](https://insights.sbomify.com/CVE-2008-3664/): Cross-site scripting in xrms:xrms crm (medium 4.3)
- [CVE-2008-3663](https://insights.sbomify.com/CVE-2008-3663/): Information disclosure in squirrelmail:squirrelmail (medium 5.0)
- [CVE-2008-3662](https://insights.sbomify.com/CVE-2008-3662/): Information disclosure in gallery:gallery (medium 5.0)
- [CVE-2008-3661](https://insights.sbomify.com/CVE-2008-3661/): Information disclosure in drupal:drupal (medium 5.0)
- [CVE-2008-3660](https://insights.sbomify.com/CVE-2008-3660/): Denial of service in php:php (medium 5.0)
- [CVE-2008-3659](https://insights.sbomify.com/CVE-2008-3659/): Memory corruption in php:php (medium 6.4)
- [CVE-2008-3658](https://insights.sbomify.com/CVE-2008-3658/): Memory corruption in php:php (high 7.5)
- [CVE-2008-3657](https://insights.sbomify.com/CVE-2008-3657/): Security feature bypass in ruby-lang:ruby (high 7.5)
- [CVE-2008-3656](https://insights.sbomify.com/CVE-2008-3656/): Denial of service in ruby-lang:ruby (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/35/