# CVEs published 2009-05-22 31 CVEs were published on May 22, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-1381](https://cve.now/CVE-2009-1381.md): The map\_yp\_alias function in functions/imap\_general.php in SquirrelMail before 1.4.19-1 on Debian GNU/Linux, and possibly other operating sy (no CVSS) - [CVE-2009-1775](https://cve.now/CVE-2009-1775.md): Multiple cross-site scripting (XSS) vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2009-1776](https://cve.now/CVE-2009-1776.md): Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attacker (no CVSS) - [CVE-2009-1777](https://cve.now/CVE-2009-1777.md): CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary (no CVSS) - [CVE-2009-1778](https://cve.now/CVE-2009-1778.md): SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magic\_quotes\_gpc is disabled, allows remote attacke (no CVSS) - [CVE-2009-1779](https://cve.now/CVE-2009-1779.md): PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2009-1780](https://cve.now/CVE-2009-1780.md): admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote at (no CVSS) - [CVE-2009-1781](https://cve.now/CVE-2009-1781.md): Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP co (no CVSS) - [CVE-2009-1782](https://cve.now/CVE-2009-1782.md): Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 an (no CVSS) - [CVE-2009-1783](https://cve.now/CVE-2009-1783.md): Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x8 (no CVSS) - [CVE-2009-1784](https://cve.now/CVE-2009-1784.md): The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk (no CVSS) - [CVE-2009-1785](https://cve.now/CVE-2009-1785.md): Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2009-1764](https://cve.now/CVE-2009-1764.md): SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in (no CVSS) - [CVE-2009-1765](https://cve.now/CVE-2009-1765.md): Multiple directory traversal vulnerabilities in pluck 4.6.2, when register\_globals is enabled, allow remote attackers to include and execute (no CVSS) - [CVE-2009-1766](https://cve.now/CVE-2009-1766.md): SQL injection vulnerability in index.php in LightOpenCMS 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2009-1767](https://cve.now/CVE-2009-1767.md): admin/edituser.php in 2daybiz Template Monster Clone does not require administrative authentication, which allows remote attackers to modify (no CVSS) - [CVE-2009-1768](https://cve.now/CVE-2009-1768.md): Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a (no CVSS) - [CVE-2009-1769](https://cve.now/CVE-2009-1769.md): The web interface in Open Computer and Software Inventory Next Generation (OCS Inventory NG) 1.01 generates different error messages dependi (no CVSS) - [CVE-2009-1770](https://cve.now/CVE-2009-1770.md): Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and e (no CVSS) - [CVE-2009-1771](https://cve.now/CVE-2009-1771.md): index.php in Flyspeck CMS 6.8 does not require administrative authentication for the updateExistingContent action, which allows remote attac (no CVSS) - [CVE-2009-1772](https://cve.now/CVE-2009-1772.md): Cross-site scripting (XSS) vulnerability in activeCollab 2.1 Corporate allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2009-1773](https://cve.now/CVE-2009-1773.md): activeCollab 2.1 Corporate allows remote attackers to obtain sensitive information via an invalid re\_route parameter to the login script, wh (no CVSS) - [CVE-2009-1774](https://cve.now/CVE-2009-1774.md): Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local (no CVSS) - [CVE-2009-1635](https://cve.now/CVE-2009-1635.md): Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP (no CVSS) - [CVE-2009-1762](https://cve.now/CVE-2009-1762.md): Multiple cross-site scripting (XSS) vulnerabilities in the WebAccess login page (aka gw/webacc) in Novell GroupWise 7.x before 7.03 HP2 allo (no CVSS) - [CVE-2009-1763](https://cve.now/CVE-2009-1763.md): Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv\_105 through snv\_108 on the x86 platf (no CVSS) - [CVE-2009-1755](https://cve.now/CVE-2009-1755.md): Off-by-one error in the packet\_read\_query\_section function in packet.c in nsd 3.2.1, and process\_query\_section in query.c in nsd 2.3.7, allo (no CVSS) - [CVE-2009-1756](https://cve.now/CVE-2009-1756.md): SLiM Simple Login Manager 1.3.0 places the X authority magic cookie (mcookie) on the command line when invoking xauth from (1) app.cpp and ( (no CVSS) - [CVE-2009-1757](https://cve.now/CVE-2009-1757.md): Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the au (no CVSS) - [CVE-2009-1758](https://cve.now/CVE-2009-1758.md): The hypervisor\_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versio (no CVSS) - [CVE-2009-1759](https://cve.now/CVE-2009-1759.md): Stack-based buffer overflow in the btFiles::BuildFromMI function (trunk/btfiles.cpp) in Enhanced CTorrent (aka dTorrent) 3.3.2 and probably (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-05-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.