# CVEs published 2009-05-22 31 CVEs were published on May 22, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-1381](https://cve.now/CVE-2009-1381.md): The map\_yp\_alias function in functions/imap\_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating… (no CVSS) - [CVE-2009-1775](https://cve.now/CVE-2009-1775.md): Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2009-1776](https://cve.now/CVE-2009-1776.md): Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote… (no CVSS) - [CVE-2009-1777](https://cve.now/CVE-2009-1777.md): CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject… (no CVSS) - [CVE-2009-1778](https://cve.now/CVE-2009-1778.md): SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic\_quotes\_gpc is disabled, allows remote… (no CVSS) - [CVE-2009-1779](https://cve.now/CVE-2009-1779.md): PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2009-1780](https://cve.now/CVE-2009-1780.md): admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote… (no CVSS) - [CVE-2009-1781](https://cve.now/CVE-2009-1781.md): Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP… (no CVSS) - [CVE-2009-1782](https://cve.now/CVE-2009-1782.md): Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61… (no CVSS) - [CVE-2009-1783](https://cve.now/CVE-2009-1783.md): Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux… (no CVSS) - [CVE-2009-1784](https://cve.now/CVE-2009-1784.md): The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security… (no CVSS) - [CVE-2009-1785](https://cve.now/CVE-2009-1785.md): Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2009-1764](https://cve.now/CVE-2009-1764.md): SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter… (no CVSS) - [CVE-2009-1765](https://cve.now/CVE-2009-1765.md): Multiple directory traversal vulnerabilities in pluck 4.6.2, when register\_globals is enabled, allow remote attackers to include and… (no CVSS) - [CVE-2009-1766](https://cve.now/CVE-2009-1766.md): SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2009-1767](https://cve.now/CVE-2009-1767.md): admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to… (no CVSS) - [CVE-2009-1768](https://cve.now/CVE-2009-1768.md): Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via… (no CVSS) - [CVE-2009-1769](https://cve.now/CVE-2009-1769.md): The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages… (no CVSS) - [CVE-2009-1770](https://cve.now/CVE-2009-1770.md): Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and… (no CVSS) - [CVE-2009-1771](https://cve.now/CVE-2009-1771.md): index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote… (no CVSS) - [CVE-2009-1772](https://cve.now/CVE-2009-1772.md): Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2009-1773](https://cve.now/CVE-2009-1773.md): activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re\_route parameter to the login script… (no CVSS) - [CVE-2009-1774](https://cve.now/CVE-2009-1774.md): Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary… (no CVSS) - [CVE-2009-1635](https://cve.now/CVE-2009-1635.md): Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0… (no CVSS) - [CVE-2009-1762](https://cve.now/CVE-2009-1762.md): Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2… (no CVSS) - [CVE-2009-1763](https://cve.now/CVE-2009-1763.md): Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv\_105 through snv\_108 on the x86… (no CVSS) - [CVE-2009-1755](https://cve.now/CVE-2009-1755.md): Off-by-one error in the packet\_read\_query\_section function in packet.c in nsd 3.2.1, and process\_query\_section in query.c in nsd 2.3.7… (no CVSS) - [CVE-2009-1756](https://cve.now/CVE-2009-1756.md): SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and… (no CVSS) - [CVE-2009-1757](https://cve.now/CVE-2009-1757.md): Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the… (no CVSS) - [CVE-2009-1758](https://cve.now/CVE-2009-1758.md): The hypervisor\_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other… (no CVSS) - [CVE-2009-1759](https://cve.now/CVE-2009-1759.md): Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2009-05-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.