month report
May 2008
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
May 2008 closed with 388 published CVEs — -32.5% YoY . 52 criticals, cisco led volume, mostly via unified communications manager. Biggest breakout: canonical at ×3.0 their 12-month median. Top weakness class — CWE-89 (85 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
388
— MoM-32.5% YoY
Severity mix
52 / 159
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.3%
5 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6507.0
n=5
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in May 2008
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — May 2008
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #2maianscriptworld14 CVE
- #9typo37 CVE
- #22badongo3 CVE
- #24icon-labs3 CVE
- #25inmedias3 CVE
- #28news manager3 CVE
- #31rdesktop3 CVE
- #32rpath3 CVE
- #33simpel side3 CVE
- #34toocharger3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 18 CVE2 critCVSS 7.7unified communications manager (7) · service control engine (3) · unified presence (3)
- 14 CVECVSS 5.0NEWmaian greeting (2) · maian music (2) · maian search (2)
- 12 CVE1 critCVSS 6.6PoC 5red hat enterprise linux (5) · enterprise linux (5) · enterprise linux desktop (4)
- 10 CVE5 critCVSS 6.3PoC 1office (3) · forefront security for sharepoint (2) · antigen for exchange (2)
- 9 CVE2 critCVSS 6.9×3.0PoC 4ubuntu linux (9)
- 8 CVECVSS 5.5PoC 2linux kernel (8)
- 8 CVE1 critCVSS 6.8solaris (3) · sunos (2) · java system web server (2)
- 7 CVE1 critCVSS 6.9PoC 5debian linux (7)
- 7 CVE1 critCVSS 6.5NEWair filemanager (2) · sr feuser register extension (2) · kj imagelightbox2 (1)
- 6 CVE1 critCVSS 6.2PoC 2gentoo linux (6)
- 6 CVE2 critCVSS 7.3lotus domino (1) · lotus domino web server (1) · lotus quickr (1)
- 6 CVECVSS 6.7PoC 1altiris deployment solution (6)
- 5 CVE4 critCVSS 9.4PoC 2php (5)
- 4 CVECVSS 6.7PoC 3angelo-emlak (2) · meto forum (1) · philboard (1)
- 4 CVECVSS 5.3PoC 1cpanel (4)
- 4 CVE2 critCVSS 7.6PoC 2gnutls (3) · emacs (1) · xemacs (1)
- 4 CVECVSS 6.8PoC 1hp-ux (2) · ldap-ux (1) · software update (1)
- 4 CVECVSS 4.1PoC 1bugzilla (3) · firefox (1)
- 4 CVE1 critCVSS 7.1Nuclei 3wordpress (3) · upload file plugin (1)
- 4 CVE1 critCVSS 6.2PoC 1libvorbis (4)
- 4 CVE3 critCVSS 8.8PoC 4debian gnu/linux (4)
- 3 CVECVSS 6.2NEWcampus bulletin board (2) · phpfix (1)
- 3 CVE2 critCVSS 8.8PoC 1fedora (3)
- 3 CVECVSS 7.8NEWiconfidant ssh (3)
- 3 CVECVSS 5.4NEWstatistics (2) · questionaire (1)
- 3 CVECVSS 7.5PoC 3com comprofiler (1) · com flippingbook (1) · com xsstream-dm (1)
- 3 CVECVSS 6.4PoC 2mostlyce (1) · com comprofiler (1) · com flippingbook (1)
- 3 CVECVSS 6.7NEWPoC 3news manager (3)
- 3 CVE1 critCVSS 7.0PoC 1opensuse (2) · suse linux enterprise (1)
- 3 CVECVSS 5.4×3.0PoC 1openssl (3)
- 3 CVE3 critCVSS 9.3NEWPoC 3rdesktop (3)
- 3 CVECVSS 5.4NEWPoC 1appliance platform agent (3)
- 3 CVECVSS 6.4NEWPoC 3netbutik (1) · weblosning (1) · weblosninger (1)
- 3 CVECVSS 6.4NEWPoC 1smartblog (3)
- 2 CVECVSS 5.9NEWPoC 2acgv news (2)
- 2 CVECVSS 7.5NEWPoC 2alkalinephp (2)
- 2 CVE1 critCVSS 8.0ical (1) · mac os x (1) · mac os x server (1)
- 2 CVE1 critCVSS 9.2brightstor arcserve backup (2) · server protection suite (1)
- 2 CVE1 critCVSS 9.2brightstor arcserve backup (2) · business protection suite (1)
- 2 CVE2 critCVSS 9.3NEWtrillian (1) · trillian pro (1)
- 2 CVECVSS 5.9access essentials (2) · desktop server (2) · citrix presentation server (1)
- 2 CVECVSS 5.9PoC 2cms faethon (2)
- 2 CVECVSS 7.5NEWPoC 2automated link exchange portal (1) · feedback and rating script (1)
- 2 CVECVSS 5.5NEWPoC 2cplinks (2)
- 2 CVECVSS 7.0PoC 2deluxebb (2)
- 2 CVE2 critCVSS 10.0NEWalphastor (2)
- 2 CVE1 critCVSS 8.8NEWemule plus (1) · x ray (1)
- 2 CVECVSS 7.2NEWPoC 2entertainmentscript (2)
- 2 CVECVSS 7.5NEWPoC 1fichive (2)
- 2 CVECVSS 7.3gr2000 (2) · gr3000 (2) · gr4000 (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | cisco | 18 | 2 | · | · | unified communications manager (7) · service control engine (3) · unified presence (3) | — | ||
| 2 | maianscriptworld | 14 | · | · | · | NEW | maian greeting (2) · maian music (2) · maian search (2) | — | |
| 3 | redhat | 12 | 1 | · | · | PoC 5 | red hat enterprise linux (5) · enterprise linux (5) · enterprise linux desktop (4) | — | |
| 4 | microsoft | 10 | 5 | · | · | PoC 1 | office (3) · forefront security for sharepoint (2) · antigen for exchange (2) | — | |
| 5 | canonical | 9 | 2 | · | · | ×3.0PoC 4 | ubuntu linux (9) | — | |
| 6 | linux | 8 | · | · | · | PoC 2 | linux kernel (8) | — | |
| 7 | sun | 8 | 1 | · | · | solaris (3) · sunos (2) · java system web server (2) | — | ||
| 8 | debian | 7 | 1 | · | · | PoC 5 | debian linux (7) | — | |
| 9 | typo3 | 7 | 1 | · | · | NEW | air filemanager (2) · sr feuser register extension (2) · kj imagelightbox2 (1) | — | |
| 10 | gentoo foundation inc. | 6 | 1 | · | · | PoC 2 | gentoo linux (6) | — | |
| 11 | ibm | 6 | 2 | · | · | lotus domino (1) · lotus domino web server (1) · lotus quickr (1) | — | ||
| 12 | symantec | 6 | · | · | · | PoC 1 | altiris deployment solution (6) | — | |
| 13 | php | 5 | 4 | · | · | PoC 2 | php (5) | — | |
| 14 | aspindir | 4 | · | · | · | PoC 3 | angelo-emlak (2) · meto forum (1) · philboard (1) | — | |
| 15 | cpanel | 4 | · | · | · | PoC 1 | cpanel (4) | — | |
| 16 | gnu | 4 | 2 | · | · | PoC 2 | gnutls (3) · emacs (1) · xemacs (1) | — | |
| 17 | hp | 4 | · | · | · | PoC 1 | hp-ux (2) · ldap-ux (1) · software update (1) | — | |
| 18 | mozilla | 4 | · | · | · | PoC 1 | bugzilla (3) · firefox (1) | — | |
| 19 | wordpress | 4 | 1 | · | 3 | Nuclei 3 | wordpress (3) · upload file plugin (1) | — | |
| 20 | xiph.org | 4 | 1 | · | · | PoC 1 | libvorbis (4) | — | |
| 21 | сообщество свободного программного обеспечения | 4 | 3 | · | · | PoC 4 | debian gnu/linux (4) | — | |
| 22 | badongo | 3 | · | · | · | NEW | campus bulletin board (2) · phpfix (1) | — | |
| 23 | fedoraproject | 3 | 2 | · | · | PoC 1 | fedora (3) | — | |
| 24 | icon-labs | 3 | · | · | · | NEW | iconfidant ssh (3) | — | |
| 25 | inmedias | 3 | · | · | · | NEW | statistics (2) · questionaire (1) | — | |
| 26 | joomla | 3 | · | · | · | PoC 3 | com comprofiler (1) · com flippingbook (1) · com xsstream-dm (1) | — | |
| 27 | mambo | 3 | · | · | · | PoC 2 | mostlyce (1) · com comprofiler (1) · com flippingbook (1) | — | |
| 28 | news manager | 3 | · | · | · | NEWPoC 3 | news manager (3) | — | |
| 29 | novell inc. | 3 | 1 | · | · | PoC 1 | opensuse (2) · suse linux enterprise (1) | — | |
| 30 | openssl | 3 | · | · | · | ×3.0PoC 1 | openssl (3) | — | |
| 31 | rdesktop | 3 | 3 | · | · | NEWPoC 3 | rdesktop (3) | — | |
| 32 | rpath | 3 | · | · | · | NEWPoC 1 | appliance platform agent (3) | — | |
| 33 | simpel side | 3 | · | · | · | NEWPoC 3 | netbutik (1) · weblosning (1) · weblosninger (1) | — | |
| 34 | toocharger | 3 | · | · | · | NEWPoC 1 | smartblog (3) | — | |
| 35 | acgv.free | 2 | · | · | · | NEWPoC 2 | acgv news (2) | — | |
| 36 | alkalinephp | 2 | · | · | · | NEWPoC 2 | alkalinephp (2) | — | |
| 37 | apple | 2 | 1 | · | · | ical (1) · mac os x (1) · mac os x server (1) | — | ||
| 38 | broadcom | 2 | 1 | · | · | brightstor arcserve backup (2) · server protection suite (1) | — | ||
| 39 | ca | 2 | 1 | · | · | brightstor arcserve backup (2) · business protection suite (1) | — | ||
| 40 | ceruleanstudios | 2 | 2 | · | · | NEW | trillian (1) · trillian pro (1) | — | |
| 41 | citrix | 2 | · | · | · | access essentials (2) · desktop server (2) · citrix presentation server (1) | — | ||
| 42 | cms faethon | 2 | · | · | · | PoC 2 | cms faethon (2) | — | |
| 43 | cmsnx | 2 | · | · | · | NEWPoC 2 | automated link exchange portal (1) · feedback and rating script (1) | — | |
| 44 | cplinks | 2 | · | · | · | NEWPoC 2 | cplinks (2) | — | |
| 45 | deluxebb | 2 | · | · | · | PoC 2 | deluxebb (2) | — | |
| 46 | emc corporation | 2 | 2 | · | · | NEW | alphastor (2) | — | |
| 47 | emule | 2 | 1 | · | · | NEW | emule plus (1) · x ray (1) | — | |
| 48 | entertainmentscript | 2 | · | · | · | NEWPoC 2 | entertainmentscript (2) | — | |
| 49 | fichive | 2 | · | · | · | NEWPoC 1 | fichive (2) | — | |
| 50 | hitachi | 2 | · | · | · | gr2000 (2) · gr3000 (2) · gr4000 (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins122 CVE9 crit76 vendorsCVSS 6.7wordpress (3) · air filemanager (2) · campus bulletin board (2)
- Operating Systems61 CVE23 crit21 vendorsCVSS 6.8ubuntu linux (9) · linux kernel (8) · debian linux (7)
- 7 crit19 vendorsCVSS 10.0unified communications manager (7) · service control engine (3) · unified presence (3)
- Enterprise Software31 CVE5 crit16 vendorsCVSS 7.3brightstor arcserve backup (2) · gr2000 (2) · gr3000 (2)
- OSS Libraries25 CVE11 crit12 vendorsCVSS 7.6php (5) · libvorbis (4) · gnutls (3)
- Consumer Software19 CVE7 crit15 vendorsCVSS 8.7rdesktop (3) · acrobat (1) · acrobat reader (1)
- Security Products13 CVE5 vendorsCVSS 7.8altiris deployment solution (6)
- Communications9 CVE5 crit7 vendorsCVSS 9.1trillian (2) · emule plus (1) · trillian pro (1)
- Cloud & SaaS7 CVE2 crit4 vendorsCVSS 6.5access essentials (2) · brightstor arcserve backup (2) · desktop server (2)
- ICS / OT / IoT5 CVE4 vendorsCVSS 6.0deluxebb (2) · intouch (1) · suitelink (1)
- Databases3 CVE3 vendorsCVSS 4.8mysql (2) · application server portal (1) · firebird (1)
- Hardware Firmware3 CVE2 crit2 vendorsCVSS 10.0alphastor (2)
- Mobile Apps2 CVE2 crit1 vendorsCVSS 8.0ical (1) · mac os x (1) · mac os x server (1)
- DevTools & CI2 CVE2 vendorsCVSS 5.0gforge (1)
- Unclassified59 CVE3 crit48 vendorsCVSS 6.6news manager (4) · smartblog (3) · cplinks (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 122 | 9 | · | 76 | 99 | 6.7 | wordpress (3) · air filemanager (2) · campus bulletin board (2) |
| Operating Systems▸ 4 | 61 | 23 | · | 21 | 52 | 6.8 | ubuntu linux (9) · linux kernel (8) · debian linux (7) |
| Networking Infrastructure▸ 6 | 36 | 7 | · | 19 | 30 | 10.0 | unified communications manager (7) · service control engine (3) · unified presence (3) |
| Enterprise Software▸ 7 | 31 | 5 | · | 16 | 28 | 7.3 | brightstor arcserve backup (2) · gr2000 (2) · gr3000 (2) |
| OSS Libraries▸ 4 | 25 | 11 | · | 12 | 17 | 7.6 | php (5) · libvorbis (4) · gnutls (3) |
| Consumer Software▸ 5 | 19 | 7 | · | 15 | 17 | 8.7 | rdesktop (3) · acrobat (1) · acrobat reader (1) |
| Security Products▸ 4 | 13 | · | · | 5 | 5 | 7.8 | altiris deployment solution (6) |
| Communications▸ 3 | 9 | 5 | · | 7 | 8 | 9.1 | trillian (2) · emule plus (1) · trillian pro (1) |
| Cloud & SaaS▸ 1 | 7 | 2 | · | 4 | 9 | 6.5 | access essentials (2) · brightstor arcserve backup (2) · desktop server (2) |
| ICS / OT / IoT▸ 2 | 5 | · | · | 4 | 5 | 6.0 | deluxebb (2) · intouch (1) · suitelink (1) |
| Databases▸ 1 | 3 | · | · | 3 | 3 | 4.8 | mysql (2) · application server portal (1) · firebird (1) |
| Hardware Firmware▸ 1 | 3 | 2 | · | 2 | 2 | 10.0 | alphastor (2) |
| Mobile Apps▸ 1 | 2 | 2 | · | 1 | 3 | 8.0 | ical (1) · mac os x (1) · mac os x server (1) |
| DevTools & CI▸ 2 | 2 | · | · | 2 | 2 | 5.0 | gforge (1) |
| Unclassified | 59 | 3 | · | 48 | 48 | 6.6 | news manager (4) · smartblog (3) · cplinks (2) |
Weakness × Sector
Which weaknesses hit which solution categories in May 2008
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
89SQL Injection79XSS119Memory Buffer Bounds264CWE-26494Code Injection20Improper Input Validation22Path Traversal399CWE-399189CWE-189287Improper AuthenticationWeb & CMS Plugins684223163114Operating Systems265231171Networking Infrastructure74211241Consumer Software44552442OSS Libraries21532161Enterprise Software273243Security Products1251121Communications4122ICS / OT / IoT11231Cloud & SaaS311