# Vulnerabilities published in 2008


- [CVE-2008-3440](https://insights.sbomify.com/CVE-2008-3440/): Security feature bypass in sun:java (high 7.5)
- [CVE-2008-3439](https://insights.sbomify.com/CVE-2008-3439/): Security feature bypass in speedbit:speedbit video accelerator (high 7.5)
- [CVE-2008-3438](https://insights.sbomify.com/CVE-2008-3438/): Security feature bypass in apple:mac os x (high 8.1)
- [CVE-2008-3437](https://insights.sbomify.com/CVE-2008-3437/): Security feature bypass in openoffice:openoffice.org (high 7.5)
- [CVE-2008-3436](https://insights.sbomify.com/CVE-2008-3436/): Security feature bypass in notepad\+\+:notepad\+\+ (high 7.5)
- [CVE-2008-3435](https://insights.sbomify.com/CVE-2008-3435/): Security feature bypass in linkedin:browser toolbar (high 7.5)
- [CVE-2008-3434](https://insights.sbomify.com/CVE-2008-3434/): Security feature bypass in apple:itunes (high 7.5)
- [CVE-2008-3433](https://insights.sbomify.com/CVE-2008-3433/): Security feature bypass in speedbit:download accelerator plus (high 7.5)
- [CVE-2008-3432](https://insights.sbomify.com/CVE-2008-3432/): Memory corruption in vim:vim (medium 6.8)
- [CVE-2008-3431](https://insights.sbomify.com/CVE-2008-3431/): Oracle VirtualBox Insufficient Input Validation (high 8.8, exploited in the wild)
- [CVE-2008-3430](https://insights.sbomify.com/CVE-2008-3430/): Memory corruption in eyeball networks:eyeball messenger sdk (critical 9.3)
- [CVE-2008-3429](https://insights.sbomify.com/CVE-2008-3429/): Memory corruption in httrack:httrack (medium 6.8)
- [CVE-2008-3428](https://insights.sbomify.com/CVE-2008-3428/): Auth bypass in phpfreechat:phpfreechat (medium 6.5)
- [CVE-2008-3426](https://insights.sbomify.com/CVE-2008-3426/): Denial of service in sun:opensolaris (low 2.1)
- [CVE-2008-3425](https://insights.sbomify.com/CVE-2008-3425/): Privilege escalation in sun:java system web server plugin (medium 6.5)
- [CVE-2008-3424](https://insights.sbomify.com/CVE-2008-3424/): Security feature bypass in condor project:condor (high 7.5)
- [CVE-2008-3423](https://insights.sbomify.com/CVE-2008-3423/): Auth bypass in ibm:websphere portal (high 7.5)
- [CVE-2008-3422](https://insights.sbomify.com/CVE-2008-3422/): Cross-site scripting in mono:mono (medium 4.3)
- [CVE-2008-3421](https://insights.sbomify.com/CVE-2008-3421/): Cross-site request forgery in blackboard:blackboard academic suite (medium 4.3)
- [CVE-2008-3420](https://insights.sbomify.com/CVE-2008-3420/): SQL injection in willo:mobius web publishing software (high 7.5)
- [CVE-2008-3419](https://insights.sbomify.com/CVE-2008-3419/): SQL injection in greatclone:youtuber clone (high 7.5)
- [CVE-2008-3418](https://insights.sbomify.com/CVE-2008-3418/): SQL injection in willo:trio (high 7.5)
- [CVE-2008-3417](https://insights.sbomify.com/CVE-2008-3417/): SQL injection in fipsasp:fipscms light (high 7.5)
- [CVE-2008-3416](https://insights.sbomify.com/CVE-2008-3416/): SQL injection in icebb:icebb (high 7.5)
- [CVE-2008-3415](https://insights.sbomify.com/CVE-2008-3415/): Path traversal in cmscout:cmscout (high 7.5)
- [CVE-2008-3414](https://insights.sbomify.com/CVE-2008-3414/): SQL injection in siteadmin:cms (high 7.5)
- [CVE-2008-3413](https://insights.sbomify.com/CVE-2008-3413/): SQL injection in greatclone:auction platinum (high 7.5)
- [CVE-2008-3412](https://insights.sbomify.com/CVE-2008-3412/): SQL injection in ecshop:epshop (high 7.5)
- [CVE-2008-3411](https://insights.sbomify.com/CVE-2008-3411/): Missing authorization in axesstel:akw-d800 (critical 10.0)
- [CVE-2008-3410](https://insights.sbomify.com/CVE-2008-3410/): Null dereference in epic games:unreal tournament 3 (medium 5.0)
- [CVE-2008-3409](https://insights.sbomify.com/CVE-2008-3409/): Memory corruption in epic games:unreal tournament 3 (high 7.5)
- [CVE-2008-3408](https://insights.sbomify.com/CVE-2008-3408/): Memory corruption in coolplayer:coolplayer (medium 6.8)
- [CVE-2008-3407](https://insights.sbomify.com/CVE-2008-3407/): Auth bypass in phplinkat:phplinkat (medium 5.0)
- [CVE-2008-3406](https://insights.sbomify.com/CVE-2008-3406/): SQL injection in phplinkat:phplinkat (high 7.5)
- [CVE-2008-3405](https://insights.sbomify.com/CVE-2008-3405/): Path traversal in nazgulled:nzfotolog (medium 6.8)
- [CVE-2008-3404](https://insights.sbomify.com/CVE-2008-3404/): Cross-site scripting in mdsjack:mjguest (medium 4.3)
- [CVE-2008-3403](https://insights.sbomify.com/CVE-2008-3403/): SQL injection in mojoscripts:mojopersonals (high 7.5)
- [CVE-2008-3402](https://insights.sbomify.com/CVE-2008-3402/): Code injection in hscripts:hiox random ad (high 7.5)
- [CVE-2008-3401](https://insights.sbomify.com/CVE-2008-3401/): Code injection in hscripts:hiox random ad (high 7.5)
- [CVE-2008-3400](https://insights.sbomify.com/CVE-2008-3400/): Information disclosure in xrms:xrms crm (medium 4.3)
- [CVE-2008-3399](https://insights.sbomify.com/CVE-2008-3399/): Code injection in xrms:xrms crm (medium 6.8)
- [CVE-2008-3398](https://insights.sbomify.com/CVE-2008-3398/): Cross-site scripting in xrms:xrms crm (low 2.6)
- [CVE-2008-3397](https://insights.sbomify.com/CVE-2008-3397/): Cross-site scripting in runesoft:cerberus cms (medium 6.1)
- [CVE-2008-3396](https://insights.sbomify.com/CVE-2008-3396/): Null dereference in epic games:unreal tournament 2004 (medium 5.0)
- [CVE-2008-3395](https://insights.sbomify.com/CVE-2008-3395/): Misconfiguration in calacode:atmail (medium 5.0)
- [CVE-2008-3394](https://insights.sbomify.com/CVE-2008-3394/): Cross-site scripting in infomining:bookmine (medium 4.3)
- [CVE-2008-3393](https://insights.sbomify.com/CVE-2008-3393/): SQL injection in infomining:bookmine (high 7.5)
- [CVE-2008-3392](https://insights.sbomify.com/CVE-2008-3392/): Cross-site request forgery in webwizguide:web wiz forum (medium 5.8)
- [CVE-2008-3391](https://insights.sbomify.com/CVE-2008-3391/): Cross-site scripting in webwizguide:web wiz forum (medium 4.3)
- [CVE-2008-3390](https://insights.sbomify.com/CVE-2008-3390/): Path traversal in minishowcase:minishowcase image gallery (medium 6.8)
- [CVE-2008-3389](https://insights.sbomify.com/CVE-2008-3389/): Memory corruption in ingres:ingres (medium 4.6)
- [CVE-2008-3388](https://insights.sbomify.com/CVE-2008-3388/): SQL injection in easy-script:def blog (high 7.5)
- [CVE-2008-3387](https://insights.sbomify.com/CVE-2008-3387/): SQL injection in phpfootball:phpfootball (high 7.5)
- [CVE-2008-3386](https://insights.sbomify.com/CVE-2008-3386/): SQL injection in alstrasoft:video share enterprise (high 7.5)
- [CVE-2008-3385](https://insights.sbomify.com/CVE-2008-3385/): Path traversal in linuxwebshop:php help agent (medium 6.8)
- [CVE-2008-3384](https://insights.sbomify.com/CVE-2008-3384/): Path traversal in cce-interact:interact (high 7.5)
- [CVE-2008-3383](https://insights.sbomify.com/CVE-2008-3383/): SQL injection in mojoscripts:mojoauto (high 7.5)
- [CVE-2008-3382](https://insights.sbomify.com/CVE-2008-3382/): SQL injection in mojoscripts:mojoclassifieds (high 7.5)
- [CVE-2008-3381](https://insights.sbomify.com/CVE-2008-3381/): MoinMoin Multiple cross-site scripting (XSS) vulnerabilities (medium 4.3)
- [CVE-2008-3380](https://insights.sbomify.com/CVE-2008-3380/): Cross-site scripting in myiosoft:easybookmarker (medium 4.3)
- [CVE-2008-3379](https://insights.sbomify.com/CVE-2008-3379/): Cross-site scripting in snarky:visualpic (medium 4.3)
- [CVE-2008-3378](https://insights.sbomify.com/CVE-2008-3378/): SQL injection in fizzmedia negativekarma:fizzmedia (high 7.5)
- [CVE-2008-3377](https://insights.sbomify.com/CVE-2008-3377/): SQL injection in brandon tallent:phptest (high 7.5)
- [CVE-2008-3376](https://insights.sbomify.com/CVE-2008-3376/): Other in jamroom:jamroom (critical 10.0)
- [CVE-2008-3375](https://insights.sbomify.com/CVE-2008-3375/): Auth bypass in jamroom:jamroom (high 7.5)
- [CVE-2008-3374](https://insights.sbomify.com/CVE-2008-3374/): SQL injection in gregarius:gregarius (high 7.5)
- [CVE-2008-3373](https://insights.sbomify.com/CVE-2008-3373/): Denial of service in grisoft:avg antivirus (medium 5.0)
- [CVE-2008-3372](https://insights.sbomify.com/CVE-2008-3372/): SQL injection in greatclone:getacoder clone (high 7.5)
- [CVE-2008-3371](https://insights.sbomify.com/CVE-2008-3371/): Path traversal in talkback:talkback (high 7.5)
- [CVE-2008-3370](https://insights.sbomify.com/CVE-2008-3370/): SQL injection in emc:centera universal access (high 7.5)
- [CVE-2008-3369](https://insights.sbomify.com/CVE-2008-3369/): SQL injection in viart:viart shop (high 7.5)
- [CVE-2008-3368](https://insights.sbomify.com/CVE-2008-3368/): Code injection in atutor:atutor (medium 6.5)
- [CVE-2008-3367](https://insights.sbomify.com/CVE-2008-3367/): Cross-site scripting in webwizguide:web wiz rich text editor (medium 4.3)
- [CVE-2008-3366](https://insights.sbomify.com/CVE-2008-3366/): SQL injection in pligg:pligg cms (high 7.5)
- [CVE-2008-3365](https://insights.sbomify.com/CVE-2008-3365/): Path traversal in pixelpost:pixelpost (medium 6.8)
- [CVE-2008-3364](https://insights.sbomify.com/CVE-2008-3364/): Memory corruption in trend micro:officescan (critical 9.3)
- [CVE-2008-3363](https://insights.sbomify.com/CVE-2008-3363/): Path traversal in dokeos:e-learning system (high 7.5)
- [CVE-2008-3362](https://insights.sbomify.com/CVE-2008-3362/): File upload in giulio ganci:wp downloads manager (critical 10.0)
- [CVE-2008-3361](https://insights.sbomify.com/CVE-2008-3361/): Memory corruption in intellitamper:intellitamper (high 7.5)
- [CVE-2008-3360](https://insights.sbomify.com/CVE-2008-3360/): Memory corruption in intellitamper:intellitamper (critical 9.3)
- [CVE-2008-3359](https://insights.sbomify.com/CVE-2008-3359/): SQL injection in owl:intranet knowledgebase (high 7.5)
- [CVE-2008-3358](https://insights.sbomify.com/CVE-2008-3358/): Cross-site scripting in sap:netweaver (medium 4.3)
- [CVE-2008-3357](https://insights.sbomify.com/CVE-2008-3357/): Privilege escalation in actian:ingres (high 7.2)
- [CVE-2008-3356](https://insights.sbomify.com/CVE-2008-3356/): Other in ingres:ingres (medium 4.6)
- [CVE-2008-3355](https://insights.sbomify.com/CVE-2008-3355/): SQL injection in camera life:camera life (high 7.5)
- [CVE-2008-3354](https://insights.sbomify.com/CVE-2008-3354/): Code injection in runcms:newbb plus module (high 7.5)
- [CVE-2008-3353](https://insights.sbomify.com/CVE-2008-3353/): Cross-site scripting in puresw:lore (medium 4.3)
- [CVE-2008-3352](https://insights.sbomify.com/CVE-2008-3352/): SQL injection in nersoft:live music plus (high 7.5)
- [CVE-2008-3351](https://insights.sbomify.com/CVE-2008-3351/): SQL injection in atomphotoblog:atomphotoblog (high 7.5)
- [CVE-2008-3350](https://insights.sbomify.com/CVE-2008-3350/): Denial of service in the kelleys:dnsmasq (medium 5.0)
- [CVE-2008-3349](https://insights.sbomify.com/CVE-2008-3349/): Missing authorization in netapp:data ontap (critical 10.0)
- [CVE-2008-3348](https://insights.sbomify.com/CVE-2008-3348/): Cross-site scripting in myiosoft:easydynamicpages (medium 4.3)
- [CVE-2008-3347](https://insights.sbomify.com/CVE-2008-3347/): SQL injection in myiosoft:easydynamicpages (high 7.5)
- [CVE-2008-3346](https://insights.sbomify.com/CVE-2008-3346/): SQL injection in e-topbiz:shopcart dx (high 7.5)
- [CVE-2008-3345](https://insights.sbomify.com/CVE-2008-3345/): SQL injection in myiosoft:easye-cards (medium 6.8)
- [CVE-2008-3344](https://insights.sbomify.com/CVE-2008-3344/): Cross-site scripting in myiosoft:easye-cards (medium 4.3)
- [CVE-2008-3343](https://insights.sbomify.com/CVE-2008-3343/): SQL injection in myiosoft:easypublish (high 7.5)
- [CVE-2008-3342](https://insights.sbomify.com/CVE-2008-3342/): Cross-site scripting in myiosoft:easypublish (medium 4.3)
- [CVE-2008-3341](https://insights.sbomify.com/CVE-2008-3341/): SQL injection in jobbex:jobsite (high 7.5)
- [CVE-2008-3340](https://insights.sbomify.com/CVE-2008-3340/): Cross-site scripting in jobbex:jobsite (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/38/