# CVEs published 2009-03-18

19 CVEs were published on March 18, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0940](https://cve.now/CVE-2009-0940.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, a (no CVSS)
- [CVE-2009-0941](https://cve.now/CVE-2009-0941.md): The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, whic (no CVSS)
- [CVE-2008-4564](https://cve.now/CVE-2008-4564.md): Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (S (no CVSS)
- [CVE-2008-6482](https://cve.now/CVE-2008-6482.md): PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com\_treeg) component 1.0 for Joomla!, when register\_gl (no CVSS)
- [CVE-2008-6483](https://cve.now/CVE-2008-6483.md): PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base (aka com\_googlebase or Froogle) (no CVSS)
- [CVE-2008-6484](https://cve.now/CVE-2008-6484.md): SQL injection vulnerability in login.php in Mole Group Taxi Map Script (aka Taxi Calc Dist Script) allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-6485](https://cve.now/CVE-2008-6485.md): SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-6486](https://cve.now/CVE-2008-6486.md): PHP remote file inclusion vulnerability in slideshow\_uploadvideo.content.php in SharedLog, when register\_globals is enabled, allows remote a (no CVSS)
- [CVE-2008-6487](https://cve.now/CVE-2008-6487.md): Multiple SQL injection vulnerabilities in login.asp in Digiappz DigiAffiliate 1.4 and earlier allow remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-6488](https://cve.now/CVE-2008-6488.md): SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2009-0538](https://cve.now/CVE-2009-0538.md): Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cau (no CVSS)
- [CVE-2007-5542](https://cve.now/CVE-2007-5542.md): Stack-based buffer overflow in Miranda IM 0.6.8 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. (no CVSS)
- [CVE-2007-5543](https://cve.now/CVE-2007-5543.md): Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger p (no CVSS)
- [CVE-2009-0934](https://cve.now/CVE-2009-0934.md): Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown (no CVSS)
- [CVE-2009-0935](https://cve.now/CVE-2009-0935.md): The inotify\_read function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial o (no CVSS)
- [CVE-2009-0936](https://cve.now/CVE-2009-0936.md): Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via "corrupt votes." (no CVSS)
- [CVE-2009-0937](https://cve.now/CVE-2009-0937.md): Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2009-0938](https://cve.now/CVE-2009-0938.md): Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed inpu (no CVSS)
- [CVE-2009-0939](https://cve.now/CVE-2009-0939.md): Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-03-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.