SQL injection through an ID that was supposed to be numeric.
CVE-2008-3477
lack of input validation in spreadsheet program leads to buffer overflows, integer overflows, array index errors, and memory corruption.
CVE-2008-3843