# CVEs published 2009-05-14

12 CVEs were published on May 14, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0714](https://cve.now/CVE-2009-0714.md): Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x (no CVSS)
- [CVE-2009-1464](https://cve.now/CVE-2009-1464.md): Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers t (no CVSS)
- [CVE-2009-1465](https://cve.now/CVE-2009-1465.md): Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attac (no CVSS)
- [CVE-2009-1466](https://cve.now/CVE-2009-1466.md): Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to (no CVSS)
- [CVE-2009-1578](https://cve.now/CVE-2009-1578.md): Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail before 1.7 allow remote attackers to inject ar (no CVSS)
- [CVE-2009-1579](https://cve.now/CVE-2009-1579.md): The map\_yp\_alias function in functions/imap\_general.php in SquirrelMail before 1.4.18 and NaSMail before 1.7 allows remote attackers to exec (no CVSS)
- [CVE-2009-1580](https://cve.now/CVE-2009-1580.md): Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie. (no CVSS)
- [CVE-2009-1581](https://cve.now/CVE-2009-1581.md): functions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from Cascading Style Sheets (CSS) positioning in (no CVSS)
- [CVE-2009-1629](https://cve.now/CVE-2009-1629.md): ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which (no CVSS)
- [CVE-2009-1630](https://cve.now/CVE-2009-1630.md): The nfs\_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic\_open is a (no CVSS)
- [CVE-2009-1631](https://cve.now/CVE-2009-1631.md): The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories a (no CVSS)
- [CVE-2009-1632](https://cve.now/CVE-2009-1632.md): Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors invol (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.