# CVEs published 2009-05-15

12 CVEs were published on May 15, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0688](https://cve.now/CVE-2009-0688.md): Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a deni (no CVSS)
- [CVE-2009-1637](https://cve.now/CVE-2009-1637.md): profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail (no CVSS)
- [CVE-2009-1638](https://cve.now/CVE-2009-1638.md): Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCar (no CVSS)
- [CVE-2009-1639](https://cve.now/CVE-2009-1639.md): Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary cod (no CVSS)
- [CVE-2009-1640](https://cve.now/CVE-2009-1640.md): Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary (no CVSS)
- [CVE-2009-1641](https://cve.now/CVE-2009-1641.md): Multiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to execute arbitrary code via (1) a long rtsp URL (no CVSS)
- [CVE-2009-1642](https://cve.now/CVE-2009-1642.md): Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) a (no CVSS)
- [CVE-2009-1643](https://cve.now/CVE-2009-1643.md): Stack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to execute arbitrary code via a crafted .m3u file. (no CVSS)
- [CVE-2009-1644](https://cve.now/CVE-2009-1644.md): Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via a crafted .pla file (no CVSS)
- [CVE-2009-1645](https://cve.now/CVE-2009-1645.md): Multiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote attackers to execute arbitrary code via (1) (no CVSS)
- [CVE-2009-1646](https://cve.now/CVE-2009-1646.md): Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long rtsp URL in a (no CVSS)
- [CVE-2009-1647](https://cve.now/CVE-2009-1647.md): Heap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to cause a denial of service (application cra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.