# CVEs published 2009-03-16

17 CVEs were published on March 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6478](https://cve.now/CVE-2008-6478.md): Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4. (no CVSS)
- [CVE-2008-6479](https://cve.now/CVE-2008-6479.md): Cross-site request forgery (CSRF) vulnerability in the "change password" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swso (no CVSS)
- [CVE-2008-6480](https://cve.now/CVE-2008-6480.md): Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack (no CVSS)
- [CVE-2009-0508](https://cve.now/CVE-2009-0508.md): The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server (WAS) 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 be (no CVSS)
- [CVE-2009-0914](https://cve.now/CVE-2009-0914.md): Opera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that triggers memory corruption. (no CVSS)
- [CVE-2009-0915](https://cve.now/CVE-2009-0915.md): Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins. (no CVSS)
- [CVE-2009-0916](https://cve.now/CVE-2009-0916.md): Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue." (no CVSS)
- [CVE-2009-0917](https://cve.now/CVE-2009-0917.md): Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by (no CVSS)
- [CVE-2009-0918](https://cve.now/CVE-2009-0918.md): Multiple unspecified vulnerabilities in DFLabs PTK 1.0.0 through 1.0.4 allow remote attackers to execute arbitrary commands in processes lau (no CVSS)
- [CVE-2009-0919](https://cve.now/CVE-2009-0919.md): XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "l (no CVSS)
- [CVE-2009-0912](https://cve.now/CVE-2009-0912.md): perl-MDK-Common 1.1.11 and 1.1.24, 1.2.9 through 1.2.14, and possibly other versions, in Mandriva Linux does not properly handle strings whe (no CVSS)
- [CVE-2009-0913](https://cve.now/CVE-2009-0913.md): Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv\_01 through snv\_108 allows local users to cau (no CVSS)
- [CVE-2008-6473](https://cve.now/CVE-2008-6473.md): \_blogadata/include/init\_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified (no CVSS)
- [CVE-2008-6474](https://cve.now/CVE-2008-6474.md): The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code (no CVSS)
- [CVE-2008-6475](https://cve.now/CVE-2008-6475.md): SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote at (no CVSS)
- [CVE-2008-6476](https://cve.now/CVE-2008-6476.md): Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2008-6477](https://cve.now/CVE-2008-6477.md): SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote attackers to execute arbitrary SQL commands via the id parameter to index (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.