# CVEs published 2009-04-21 26 CVEs were published on April 21, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-1358](https://cve.now/CVE-2009-1358.md): apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even… (no CVSS) - [CVE-2006-7238](https://cve.now/CVE-2006-7238.md): Cross-site scripting (XSS) vulnerability in MyShoutPro before 1.2 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2008-6732](https://cve.now/CVE-2008-6732.md): Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject… (no CVSS) - [CVE-2008-6733](https://cve.now/CVE-2008-6733.md): Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject… (no CVSS) - [CVE-2008-6734](https://cve.now/CVE-2008-6734.md): Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute… (no CVSS) - [CVE-2008-6735](https://cve.now/CVE-2008-6735.md): Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2008-6736](https://cve.now/CVE-2008-6736.md): Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via… (no CVSS) - [CVE-2008-6737](https://cve.now/CVE-2008-6737.md): Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange… (no CVSS) - [CVE-2008-6738](https://cve.now/CVE-2008-6738.md): MyShoutPro 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin\_access cookie to 1. (no CVSS) - [CVE-2008-6739](https://cve.now/CVE-2008-6739.md): Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to… (no CVSS) - [CVE-2008-6740](https://cve.now/CVE-2008-6740.md): PHP remote file inclusion vulnerability in html/admin/modules/plugin\_admin.php in HoMaP-CMS 0.1 allows remote attackers to execute… (no CVSS) - [CVE-2008-6741](https://cve.now/CVE-2008-6741.md): SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2008-6742](https://cve.now/CVE-2008-6742.md): Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a download action and a… (no CVSS) - [CVE-2009-1350](https://cve.now/CVE-2009-1350.md): Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by… (no CVSS) - [CVE-2009-1351](https://cve.now/CVE-2009-1351.md): Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and possibly execute… (no CVSS) - [CVE-2009-1352](https://cve.now/CVE-2009-1352.md): Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (application crash) and… (no CVSS) - [CVE-2009-1353](https://cve.now/CVE-2009-1353.md): Buffer overflow in the http\_parse\_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of… (no CVSS) - [CVE-2009-1354](https://cve.now/CVE-2009-1354.md): Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2009-1355](https://cve.now/CVE-2009-1355.md): Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename. (no CVSS) - [CVE-2009-1356](https://cve.now/CVE-2009-1356.md): Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a… (no CVSS) - [CVE-2009-0715](https://cve.now/CVE-2009-0715.md): Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain… (no CVSS) - [CVE-2009-0716](https://cve.now/CVE-2009-0716.md): Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service… (no CVSS) - [CVE-2009-0717](https://cve.now/CVE-2009-0717.md): Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service… (no CVSS) - [CVE-2009-0718](https://cve.now/CVE-2009-0718.md): Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code… (no CVSS) - [CVE-2009-1266](https://cve.now/CVE-2009-1266.md): Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors. (no CVSS) - [CVE-2009-1349](https://cve.now/CVE-2009-1349.md): Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI. (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2009-04-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.