# CVEs published 2009-05-28

15 CVEs were published on May 28, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1195](https://cve.now/CVE-2009-1195.md): The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive… (no CVSS)
- [CVE-2009-1384](https://cve.now/CVE-2009-1384.md): pam\_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the… (no CVSS)
- [CVE-2009-1633](https://cve.now/CVE-2009-1633.md): Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service… (no CVSS)
- [CVE-2009-1806](https://cve.now/CVE-2009-1806.md): Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown… (no CVSS)
- [CVE-2009-1807](https://cve.now/CVE-2009-1807.md): Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by… (no CVSS)
- [CVE-2009-1808](https://cve.now/CVE-2009-1808.md): Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI\_SETDESKWALLPAPER… (no CVSS)
- [CVE-2008-6814](https://cve.now/CVE-2008-6814.md): Unrestricted file upload vulnerability in image\_upload.php in the SimpleBoard (com\_simpleboard) component 1.0.1 and earlier for Mambo… (no CVSS)
- [CVE-2008-6815](https://cve.now/CVE-2008-6815.md): mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by… (no CVSS)
- [CVE-2008-6816](https://cve.now/CVE-2008-6816.md): Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to… (no CVSS)
- [CVE-2009-1799](https://cve.now/CVE-2009-1799.md): Multiple SQL injection vulnerabilities in the getGalleryImage function in st\_admin/gallery\_output.php in ST-Gallery 0.1 alpha, when… (no CVSS)
- [CVE-2009-1800](https://cve.now/CVE-2009-1800.md): Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows… (no CVSS)
- [CVE-2009-1801](https://cve.now/CVE-2009-1801.md): Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote… (no CVSS)
- [CVE-2009-1802](https://cve.now/CVE-2009-1802.md): Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow… (no CVSS)
- [CVE-2009-1803](https://cve.now/CVE-2009-1803.md): FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt… (no CVSS)
- [CVE-2009-1804](https://cve.now/CVE-2009-1804.md): Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-05-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.