# Vulnerabilities published in 2008


- [CVE-2008-3655](https://insights.sbomify.com/CVE-2008-3655/): Security feature bypass in ruby-lang:ruby (high 7.5)
- [CVE-2008-3654](https://insights.sbomify.com/CVE-2008-3654/): Information disclosure in tiki:tikiwiki cms\/groupware (medium 5.0)
- [CVE-2008-3653](https://insights.sbomify.com/CVE-2008-3653/): Other in tiki:tikiwiki cms\/groupware (critical 10.0)
- [CVE-2008-3652](https://insights.sbomify.com/CVE-2008-3652/): Denial of service in ipsec-tools:ipsec-tools (high 7.8)
- [CVE-2008-3651](https://insights.sbomify.com/CVE-2008-3651/): Denial of service in linux:ipsec tools racoon daemon (medium 4.0)
- [CVE-2008-3650](https://insights.sbomify.com/CVE-2008-3650/): Cross-site scripting in horde:groupware webmail edition (critical 9.0)
- [CVE-2008-3649](https://insights.sbomify.com/CVE-2008-3649/): SQL injection in articlefriendly:article friendly (medium 6.8)
- [CVE-2008-3648](https://insights.sbomify.com/CVE-2008-3648/): Code injection in microsoft:windows xp (critical 9.3)
- [CVE-2008-3647](https://insights.sbomify.com/CVE-2008-3647/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2008-3646](https://insights.sbomify.com/CVE-2008-3646/): Misconfiguration in apple:mac os x (medium 6.8)
- [CVE-2008-3645](https://insights.sbomify.com/CVE-2008-3645/): Memory corruption in apple:mac os x (high 7.2)
- [CVE-2008-3644](https://insights.sbomify.com/CVE-2008-3644/): Information disclosure in apple:safari (low 1.9)
- [CVE-2008-3643](https://insights.sbomify.com/CVE-2008-3643/): Denial of service in apple:mac os x (high 7.8)
- [CVE-2008-3642](https://insights.sbomify.com/CVE-2008-3642/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2008-3641](https://insights.sbomify.com/CVE-2008-3641/): Memory corruption in apple:cups (critical 10.0)
- [CVE-2008-3640](https://insights.sbomify.com/CVE-2008-3640/): Integer overflow in apple:cups (medium 6.8)
- [CVE-2008-3639](https://insights.sbomify.com/CVE-2008-3639/): Memory corruption in apple:cups (high 7.5)
- [CVE-2008-3638](https://insights.sbomify.com/CVE-2008-3638/): Code injection in apple:mac os x (critical 9.3)
- [CVE-2008-3637](https://insights.sbomify.com/CVE-2008-3637/): Memory corruption in apple:mac os x (high 8.8)
- [CVE-2008-3636](https://insights.sbomify.com/CVE-2008-3636/): Integer overflow in apple:itunes (high 7.2)
- [CVE-2008-3635](https://insights.sbomify.com/CVE-2008-3635/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2008-3634](https://insights.sbomify.com/CVE-2008-3634/): Security feature bypass in apple:itunes (low 2.6)
- [CVE-2008-3632](https://insights.sbomify.com/CVE-2008-3632/): Use after free in apple:iphone (critical 9.3)
- [CVE-2008-3631](https://insights.sbomify.com/CVE-2008-3631/): Security feature bypass in apple:ipod touch (high 7.1)
- [CVE-2008-3630](https://insights.sbomify.com/CVE-2008-3630/): Weak cryptography in apple:bonjour (medium 6.4)
- [CVE-2008-3629](https://insights.sbomify.com/CVE-2008-3629/): Memory corruption in apple:quicktime (medium 4.3)
- [CVE-2008-3628](https://insights.sbomify.com/CVE-2008-3628/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2008-3627](https://insights.sbomify.com/CVE-2008-3627/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2008-3626](https://insights.sbomify.com/CVE-2008-3626/): Memory corruption in apple:quicktime (medium 6.8)
- [CVE-2008-3625](https://insights.sbomify.com/CVE-2008-3625/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2008-3624](https://insights.sbomify.com/CVE-2008-3624/): Memory corruption in apple:quicktime (medium 6.8)
- [CVE-2008-3623](https://insights.sbomify.com/CVE-2008-3623/): Memory corruption in apple:safari (critical 9.3)
- [CVE-2008-3622](https://insights.sbomify.com/CVE-2008-3622/): Cross-site scripting in apple:mac os x (medium 4.3)
- [CVE-2008-3621](https://insights.sbomify.com/CVE-2008-3621/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2008-3619](https://insights.sbomify.com/CVE-2008-3619/): Misconfiguration in apple:mac os x (low 2.1)
- [CVE-2008-3618](https://insights.sbomify.com/CVE-2008-3618/): Security feature bypass in apple:mac os x (critical 9.0)
- [CVE-2008-3617](https://insights.sbomify.com/CVE-2008-3617/): Security feature bypass in apple:mac os x (medium 5.0)
- [CVE-2008-3616](https://insights.sbomify.com/CVE-2008-3616/): Integer overflow in apple:mac os x (critical 10.0)
- [CVE-2008-3615](https://insights.sbomify.com/CVE-2008-3615/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2008-3614](https://insights.sbomify.com/CVE-2008-3614/): Integer overflow in apple:quicktime (medium 6.8)
- [CVE-2008-3613](https://insights.sbomify.com/CVE-2008-3613/): Null dereference in apple:mac os x (medium 6.1)
- [CVE-2008-3612](https://insights.sbomify.com/CVE-2008-3612/): Weak cryptography in apple:iphone os (critical 9.8)
- [CVE-2008-3611](https://insights.sbomify.com/CVE-2008-3611/): Auth bypass in apple:mac os x (medium 6.3)
- [CVE-2008-3610](https://insights.sbomify.com/CVE-2008-3610/): Race condition in apple:mac os x (high 7.6)
- [CVE-2008-3609](https://insights.sbomify.com/CVE-2008-3609/): Security feature bypass in apple:mac os x (high 7.2)
- [CVE-2008-3608](https://insights.sbomify.com/CVE-2008-3608/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2008-3607](https://insights.sbomify.com/CVE-2008-3607/): Denial of service in noticeware:email server (medium 5.0)
- [CVE-2008-3606](https://insights.sbomify.com/CVE-2008-3606/): Memory corruption in qbik:wingate (medium 6.5)
- [CVE-2008-3605](https://insights.sbomify.com/CVE-2008-3605/): Weak cryptography in mcafee:encrypted usb manager (medium 6.8)
- [CVE-2008-3604](https://insights.sbomify.com/CVE-2008-3604/): SQL injection in zeescripts:zeebuddy (critical 9.8)
- [CVE-2008-3603](https://insights.sbomify.com/CVE-2008-3603/): SQL injection in vacation rentals:vacation rental script (high 7.5)
- [CVE-2008-3602](https://insights.sbomify.com/CVE-2008-3602/): Auth bypass in psychdaily:php ring webring system (high 7.5)
- [CVE-2008-3601](https://insights.sbomify.com/CVE-2008-3601/): SQL injection in quicksilver forums:quicksilver forums (high 7.5)
- [CVE-2008-3600](https://insights.sbomify.com/CVE-2008-3600/): Path traversal in menalto:gallery (medium 6.8)
- [CVE-2008-3599](https://insights.sbomify.com/CVE-2008-3599/): SQL injection in openimpro:openimpro (high 7.5)
- [CVE-2008-3598](https://insights.sbomify.com/CVE-2008-3598/): SQL injection in psi-labs:psipuss (high 7.5)
- [CVE-2008-3597](https://insights.sbomify.com/CVE-2008-3597/): Null dereference in skulltag:skulltag (high 7.5)
- [CVE-2008-3596](https://insights.sbomify.com/CVE-2008-3596/): Cross-site scripting in harmoni:harmoni (medium 4.3)
- [CVE-2008-3595](https://insights.sbomify.com/CVE-2008-3595/): Code injection in txtsql:txtsql (critical 9.3)
- [CVE-2008-3594](https://insights.sbomify.com/CVE-2008-3594/): SQL injection in magicscripts:e-store kit-1 (high 7.5)
- [CVE-2008-3593](https://insights.sbomify.com/CVE-2008-3593/): Path traversal in syzygycms:syzygycms (high 7.5)
- [CVE-2008-3592](https://insights.sbomify.com/CVE-2008-3592/): File upload in 21degrees:symphony (high 8.5)
- [CVE-2008-3591](https://insights.sbomify.com/CVE-2008-3591/): SQL injection in 21degrees:symphony (high 7.5)
- [CVE-2008-3590](https://insights.sbomify.com/CVE-2008-3590/): SQL injection in egi zaberl:e.z. poll (high 7.5)
- [CVE-2008-3589](https://insights.sbomify.com/CVE-2008-3589/): Path traversal in mozilo:mozilocms (medium 4.3)
- [CVE-2008-3588](https://insights.sbomify.com/CVE-2008-3588/): SQL injection in phsblog:phsblog (high 7.5)
- [CVE-2008-3587](https://insights.sbomify.com/CVE-2008-3587/): Cross-site scripting in needscripts:homes 4 sale (medium 4.3)
- [CVE-2008-3586](https://insights.sbomify.com/CVE-2008-3586/): SQL injection in joomla:com ezstore (high 7.5)
- [CVE-2008-3585](https://insights.sbomify.com/CVE-2008-3585/): SQL injection in pozscripts:greencart php shopping cart (high 7.5)
- [CVE-2008-3584](https://insights.sbomify.com/CVE-2008-3584/): Denial of service in netbsd:netbsd (critical 9.3)
- [CVE-2008-3583](https://insights.sbomify.com/CVE-2008-3583/): Memory corruption in intellitamper:intellitamper (high 7.5)
- [CVE-2008-3582](https://insights.sbomify.com/CVE-2008-3582/): SQL injection in keld:php-mysql news script (medium 6.8)
- [CVE-2008-3581](https://insights.sbomify.com/CVE-2008-3581/): Cross-site scripting in qsoft:k-links (medium 4.3)
- [CVE-2008-3580](https://insights.sbomify.com/CVE-2008-3580/): SQL injection in qsoft:k-links (high 7.5)
- [CVE-2008-3579](https://insights.sbomify.com/CVE-2008-3579/): Missing authorization in calacode:atmail (high 7.8)
- [CVE-2008-3578](https://insights.sbomify.com/CVE-2008-3578/): Null dereference in hydrairc:hydrairc (medium 5.0)
- [CVE-2008-3577](https://insights.sbomify.com/CVE-2008-3577/): Memory corruption in openttd:openttd (medium 4.6)
- [CVE-2008-3576](https://insights.sbomify.com/CVE-2008-3576/): Memory corruption in openttd:openttd (critical 10.0)
- [CVE-2008-3575](https://insights.sbomify.com/CVE-2008-3575/): Code injection in ezcontents:ezcontents cms (high 7.5)
- [CVE-2008-3574](https://insights.sbomify.com/CVE-2008-3574/): Cross-site scripting in pluck:pluck (low 2.6)
- [CVE-2008-3573](https://insights.sbomify.com/CVE-2008-3573/): Security feature bypass in php-nuke:php-nuke (medium 5.0)
- [CVE-2008-3572](https://insights.sbomify.com/CVE-2008-3572/): Cross-site scripting in pligg:pligg cms (medium 4.3)
- [CVE-2008-3571](https://insights.sbomify.com/CVE-2008-3571/): Denial of service in xerox:phaser (high 7.8)
- [CVE-2008-3570](https://insights.sbomify.com/CVE-2008-3570/): Code injection in africabegone:africa be gone (high 7.5)
- [CVE-2008-3569](https://insights.sbomify.com/CVE-2008-3569/): Cross-site scripting in apache friends:xampp (medium 4.3)
- [CVE-2008-3568](https://insights.sbomify.com/CVE-2008-3568/): Path traversal in unak:unak-cms (high 7.5)
- [CVE-2008-3567](https://insights.sbomify.com/CVE-2008-3567/): Cross-site scripting in nullsoft:winamp (medium 4.3)
- [CVE-2008-3566](https://insights.sbomify.com/CVE-2008-3566/): Cross-site scripting in zoneo-soft:freeforum (medium 4.3)
- [CVE-2008-3565](https://insights.sbomify.com/CVE-2008-3565/): Cross-site scripting in mrbs:mrbs (medium 4.3)
- [CVE-2008-3564](https://insights.sbomify.com/CVE-2008-3564/): Path traversal in dayfox designs:dayfox blog (high 7.5)
- [CVE-2008-3563](https://insights.sbomify.com/CVE-2008-3563/): SQL injection in plogger:plogger (high 7.5)
- [CVE-2008-3562](https://insights.sbomify.com/CVE-2008-3562/): Path traversal in chupix:chupix cms (medium 5.1)
- [CVE-2008-3561](https://insights.sbomify.com/CVE-2008-3561/): SQL injection in powergap:shopsystem (medium 6.8)
- [CVE-2008-3560](https://insights.sbomify.com/CVE-2008-3560/): Cross-site scripting in xoops:kshop module (medium 4.3)
- [CVE-2008-3559](https://insights.sbomify.com/CVE-2008-3559/): Cross-site scripting in kaphotoservice:kaphotoservice (medium 4.3)
- [CVE-2008-3558](https://insights.sbomify.com/CVE-2008-3558/): Memory corruption in cisco:webex meeting manager (critical 9.3)
- [CVE-2008-3557](https://insights.sbomify.com/CVE-2008-3557/): Auth bypass in fhm-script:free hosting manager (high 7.5)
- [CVE-2008-3556](https://insights.sbomify.com/CVE-2008-3556/): SQL injection in haudenschilt:battlenet clan script (high 7.5)
- [CVE-2008-3555](https://insights.sbomify.com/CVE-2008-3555/): Path traversal in wsn:forum (medium 6.8)
- [CVE-2008-3554](https://insights.sbomify.com/CVE-2008-3554/): SQL injection in comsenz:discuz (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/36/