# CVEs published 2009-05-04

11 CVEs were published on May 4, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2008-6788](https://cve.now/CVE-2008-6788.md): SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-6789](https://cve.now/CVE-2008-6789.md): SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username param (no CVSS)
- [CVE-2008-6790](https://cve.now/CVE-2008-6790.md): The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified user (no CVSS)
- [CVE-2008-6791](https://cve.now/CVE-2008-6791.md): PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode field. (no CVSS)
- [CVE-2009-1518](https://cve.now/CVE-2009-1518.md): Cross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authentication of unspecified (no CVSS)
- [CVE-2009-1519](https://cve.now/CVE-2009-1519.md): Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2009-1516](https://cve.now/CVE-2009-1516.md): Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context (no CVSS)
- [CVE-2009-1517](https://cve.now/CVE-2009-1517.md): Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizar (no CVSS)
- [CVE-2009-1513](https://cve.now/CVE-2009-1513.md): Buffer overflow in the PATinst function in src/load\_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a deni (no CVSS)
- [CVE-2009-1514](https://cve.now/CVE-2009-1514.md): Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw s (no CVSS)
- [CVE-2009-1515](https://cve.now/CVE-2009-1515.md): Heap-based buffer overflow in the cdf\_read\_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to e (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.