CVE-2008-4729: Hummingbird Exceed

Medium severity, CVSS 6.8. EPSS: 6.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0.

Affected products

• Hummingbird Exceed: up to and including 13.0; version 9.0 only; version 10.0 only; version 2006 only; version 2007 only
• Hummingbird Exceed Powersuite: any version

Published 2008-10-24. Last modified 2026-06-16.