# CVEs published 2009-05-05 17 CVEs were published on May 5, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-1184](https://cve.now/CVE-2009-1184.md): The selinux\_ip\_postroute\_iptables\_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, (no CVSS) - [CVE-2009-1467](https://cve.now/CVE-2009-1467.md): Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject (no CVSS) - [CVE-2009-1468](https://cve.now/CVE-2009-1468.md): Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMa (no CVSS) - [CVE-2009-1469](https://cve.now/CVE-2009-1469.md): CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9 (no CVSS) - [CVE-2009-1525](https://cve.now/CVE-2009-1525.md): CMD\_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name p (no CVSS) - [CVE-2009-1526](https://cve.now/CVE-2009-1526.md): JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a cer (no CVSS) - [CVE-2009-1527](https://cve.now/CVE-2009-1527.md): Race condition in the ptrace\_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30-rc4 allows local users to gain privileges (no CVSS) - [CVE-2009-1490](https://cve.now/CVE-2009-1490.md): Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execut (no CVSS) - [CVE-2009-1491](https://cve.now/CVE-2009-1491.md): McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other (no CVSS) - [CVE-2008-4828](https://cve.now/CVE-2008-4828.md): Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 thr (no CVSS) - [CVE-2009-0148](https://cve.now/CVE-2009-0148.md): Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) sour (no CVSS) - [CVE-2009-0720](https://cve.now/CVE-2009-0720.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary cod (no CVSS) - [CVE-2009-1520](https://cve.now/CVE-2009-1520.md): Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 thro (no CVSS) - [CVE-2009-1521](https://cve.now/CVE-2009-1521.md): Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5 (no CVSS) - [CVE-2009-1522](https://cve.now/CVE-2009-1522.md): The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduc (no CVSS) - [CVE-2009-1523](https://cve.now/CVE-2009-1523.md): Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote att (no CVSS, org.mortbay.jetty:jetty) - [CVE-2009-1524](https://cve.now/CVE-2009-1524.md): Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-05-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.