CVE-2008-1049: Positive Software H-Sphere

High severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors.

Affected products

• Positive Software H-Sphere: up to and including 2.5_patch_10; up to and including 3.0_patch_8
• Positive Software Sitestudio: version 1.7.1 only; version 1.8 only

Published 2008-02-27. Last modified 2026-06-16.