# CVEs published 2009-05-18

13 CVEs were published on May 18, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0721](https://cve.now/CVE-2009-0721.md): Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 allows remote attacker (no CVSS)
- [CVE-2009-1666](https://cve.now/CVE-2009-1666.md): Multiple unspecified vulnerabilities in CycloMedia CycloScopeLite 2.50.3.0 allow remote attackers to execute arbitrary code via the ReturnCo (no CVSS)
- [CVE-2009-1667](https://cve.now/CVE-2009-1667.md): Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long entry in a .m3u f (no CVSS)
- [CVE-2009-1668](https://cve.now/CVE-2009-1668.md): TYPSoft FTP Server 1.11 allows remote attackers to cause a denial of service (CPU consumption) by sending an ABOR (abort) command without an (no CVSS)
- [CVE-2009-1669](https://cve.now/CVE-2009-1669.md): The smarty\_function\_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers to execute arbitrary (no CVSS)
- [CVE-2009-1670](https://cve.now/CVE-2009-1670.md): user/index.php in TCPDB 3.8 does not require administrative authentication, which allows remote attackers to add admin accounts via unspecif (no CVSS)
- [CVE-2009-1671](https://cve.now/CVE-2009-1671.md): Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 (no CVSS)
- [CVE-2009-1672](https://cve.now/CVE-2009-1672.md): The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote atta (no CVSS)
- [CVE-2009-1673](https://cve.now/CVE-2009-1673.md): The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argument of AT\_FDCWD. (no CVSS)
- [CVE-2009-1674](https://cve.now/CVE-2009-1674.md): Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof path (no CVSS)
- [CVE-2009-1675](https://cve.now/CVE-2009-1675.md): Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a (no CVSS)
- [CVE-2009-1677](https://cve.now/CVE-2009-1677.md): Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) (no CVSS)
- [CVE-2009-1678](https://cve.now/CVE-2009-1678.md): Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.