# CVEs published 2009-07-13

17 CVEs were published on July 13, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2445](https://cve.now/CVE-2009-2445.md): Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when… (no CVSS)
- [CVE-2009-2446](https://cve.now/CVE-2009-2446.md): Multiple format string vulnerabilities in the dispatch\_command function in libmysqld/sql\_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83… (no CVSS)
- [CVE-2009-2447](https://cve.now/CVE-2009-2447.md): Multiple cross-site scripting (XSS) vulnerabilities in ogp\_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2009-2448](https://cve.now/CVE-2009-2448.md): Cross-site scripting (XSS) vulnerability in ogp\_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-2449](https://cve.now/CVE-2009-2449.md): Directory traversal vulnerability in maillinglist/admin/change\_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include… (no CVSS)
- [CVE-2009-2450](https://cve.now/CVE-2009-2450.md): The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5… (no CVSS)
- [CVE-2009-2434](https://cve.now/CVE-2009-2434.md): Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2009-2435](https://cve.now/CVE-2009-2435.md): The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with… (no CVSS)
- [CVE-2009-2436](https://cve.now/CVE-2009-2436.md): SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2009-2437](https://cve.now/CVE-2009-2437.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-2438](https://cve.now/CVE-2009-2438.md): Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to… (no CVSS)
- [CVE-2009-2439](https://cve.now/CVE-2009-2439.md): Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2009-2440](https://cve.now/CVE-2009-2440.md): Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2009-2441](https://cve.now/CVE-2009-2441.md): Cross-site scripting (XSS) vulnerability in ogp\_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2009-2442](https://cve.now/CVE-2009-2442.md): Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2009-2443](https://cve.now/CVE-2009-2443.md): Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to… (no CVSS)
- [CVE-2009-2444](https://cve.now/CVE-2009-2444.md): Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2009-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.