rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-7192 
Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-09T19:00:00.000Z
CVE-2008-7193 
PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-09T19:00:00.000Z
CVE-2008-7194 
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server 5.0, 7.0, 7.0.1, and 8.0.0 for Windows, allows attackers to cause a denial of service via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7195 
Unspecified vulnerability in Fujitsu Interstage HTTP Server, as used in Interstage Application Server Enterprise Edition 7.0.1 for Solaris, allows attackers to cause a denial of service via unknown vectors related to SSL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7196 
Unspecified vulnerability in metashell before 0.03 has unknown impact and attack vectors related to a "PATH execution security flaw," possibly an untrusted search path vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7197 
Multiple unspecified vulnerabilities in G15Daemon before 1.9.4 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7198 
Multiple unspecified vulnerabilities in phpns before 2.1.1beta1 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7199 
Phoenix Contact FL IL 24 BK-PAC allows remote attackers to cause a denial of service (hang) via (1) unspecified manipulations as demonstrated by a Nessus scan or (2) malformed input to TCP port 502.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7200 
Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7201 
Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as demonstrated using (1) Nessus and (2) nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7202 
Multiple cross-site scripting (XSS) vulnerabilities in OpenWebMail before 2.53 (Stable) allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-10T10:00:00.000Z
CVE-2008-7203 
Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7204 
Cross-site request forgery (CSRF) vulnerability in VirtueMart 1.0.13a and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7205 
Unspecified vulnerability in the product view functionality in VirtueMart 1.0.13a and earlier allows remote attackers to read arbitrary files via vectors related to a template file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7206 
Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7207 
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7208 
Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7209 
Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7210 
directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter's hash value, which prevents the associated $_GET["s"] variable from being unset.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7211 
CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade access to the Physical Device Object (PDO), which allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7212 
MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7213 
Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7214 
Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7215 
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7216 
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-11T16:00:00.000Z
CVE-2008-7217 
Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and ownership for certain directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-13T22:00:00.000Z
CVE-2008-7218 
Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 before 2.2-RC2; Kronolith H3 2.1 before 2.1.7 and H3 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and 2.2 before 2.2-RC2; Horde Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-13T22:00:00.000Z
CVE-2008-7219 
Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 2.2 before 2.2-RC2; Groupware 1.0 before 1.0.3 and 1.1 before 1.1-RC2; and Groupware Webmail Edition 1.0 before 1.0.4 and 1.1 before 1.1-RC2 does not validate ownership when performing share changes, which has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-13T22:00:00.000Z
CVE-2008-7220 
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-13T22:00:00.000Z
CVE-2008-7221 
Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7222 
Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7223 
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7224 
Buffer overflow in entity_cache in ELinks before 0.11.4rc0 allows remote attackers to cause a denial of service (crash) via a crafted link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7225 
Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7226 
SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7227 
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7228 
Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7229 
GreenSQL Firewall (greensql-fw) before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly involving an encoded space character (%20).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7230 
Unspecified vulnerability in Small Footprint CIM Broker (SFCB) before 1.2.5 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7231 
Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7232 
Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7233 
Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Oracle Jinitiator component, aka AS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7234 
Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7235 
Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect integrity via unknown vectors, aka AS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7236 
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows remote attackers to affect integrity via unknown vectors, aka AS05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7237 
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to affect confidentiality via unknown vectors, aka AS06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7238 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7239 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the (1) Oracle Application Object Library (APP02) and (2) Oracle Applications Manager (APP04).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-14T14:00:00.000Z
CVE-2008-7240 
Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-17T18:00:00.000Z
CVE-2008-7241 
Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-17T18:00:00.000Z
CVE-2008-7242 
Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-17T18:00:00.000Z
CVE-2008-7243 
Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php.  NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-17T18:00:00.000Z
CVE-2008-7244 
Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-18T22:00:00.000Z
CVE-2008-7245 
Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-18T22:00:00.000Z
CVE-2008-7246 
Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-18T22:00:00.000Z
CVE-2008-7247 
sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-30T17:00:00.000Z
CVE-2008-7248 
Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-16T01:00:00.000Z
CVE-2008-7249 
Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-30T22:00:00.000Z
CVE-2008-7250 
Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists because of an incomplete fix for CVE-2008-1168.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-12-30T22:00:00.000Z
CVE-2008-7251 
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-19T16:00:00.000Z
CVE-2008-7252 
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-19T16:00:00.000Z
CVE-2008-7253 
The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-01-25T19:00:00.000Z
CVE-2008-7254 
Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, when register_globals is enabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the _Root_Path parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-07T18:00:00.000Z
CVE-2008-7255 
login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-20T16:00:00.000Z