# CVEs published 2009-04-16

10 CVEs were published on April 16, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2238](https://cve.now/CVE-2007-2238.md): Multiple stack-based buffer overflows in the Whale Client Components ActiveX control (WhlMgr.dll), as used in Microsoft Intelligent Applicat (no CVSS)
- [CVE-2008-4830](https://cve.now/CVE-2008-4830.md): Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7 (no CVSS)
- [CVE-2008-5259](https://cve.now/CVE-2008-5259.md): Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2009-0196](https://cve.now/CVE-2009-0196.md): Heap-based buffer overflow in the big2\_decode\_symbol\_dict function (jbig2\_symbol\_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostsc (no CVSS)
- [CVE-2009-0579](https://cve.now/CVE-2009-0579.md): Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass i (no CVSS)
- [CVE-2009-1285](https://cve.now/CVE-2009-1285.md): Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows (no CVSS)
- [CVE-2009-1293](https://cve.now/CVE-2009-1293.md): The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on wheth (no CVSS)
- [CVE-2009-1294](https://cve.now/CVE-2009-1294.md): Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) (no CVSS)
- [CVE-2009-1300](https://cve.now/CVE-2009-1300.md): apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time (no CVSS)
- [CVE-2009-1301](https://cve.now/CVE-2009-1301.md): Integer signedness error in the store\_id3\_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.