# CVEs published 2009-05-08

5 CVEs were published on May 8, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1588](https://cve.now/CVE-2009-1588.md): Cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows rem (no CVSS)
- [CVE-2009-1589](https://cve.now/CVE-2009-1589.md): Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vect (no CVSS)
- [CVE-2009-1590](https://cve.now/CVE-2009-1590.md): Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form. (no CVSS)
- [CVE-2009-1591](https://cve.now/CVE-2009-1591.md): CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cros (no CVSS)
- [CVE-2009-1592](https://cve.now/CVE-2009-1592.md): Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long banner. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.