# CVEs published 2009-05-28

15 CVEs were published on May 28, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1195](https://cve.now/CVE-2009-1195.md): The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which (no CVSS)
- [CVE-2009-1384](https://cve.now/CVE-2009-1384.md): pam\_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the u (no CVSS)
- [CVE-2009-1633](https://cve.now/CVE-2009-1633.md): Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service ( (no CVSS)
- [CVE-2009-1806](https://cve.now/CVE-2009-1806.md): Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impa (no CVSS)
- [CVE-2009-1807](https://cve.now/CVE-2009-1807.md): Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by call (no CVSS)
- [CVE-2009-1808](https://cve.now/CVE-2009-1808.md): Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI\_SETDESKWALLPAPER SystemParametersIn (no CVSS)
- [CVE-2008-6814](https://cve.now/CVE-2008-6814.md): Unrestricted file upload vulnerability in image\_upload.php in the SimpleBoard (com\_simpleboard) component 1.0.1 and earlier for Mambo allows (no CVSS)
- [CVE-2008-6815](https://cve.now/CVE-2008-6815.md): mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by m (no CVSS)
- [CVE-2008-6816](https://cve.now/CVE-2008-6816.md): Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the (no CVSS)
- [CVE-2009-1799](https://cve.now/CVE-2009-1799.md): Multiple SQL injection vulnerabilities in the getGalleryImage function in st\_admin/gallery\_output.php in ST-Gallery 0.1 alpha, when magic\_qu (no CVSS)
- [CVE-2009-1800](https://cve.now/CVE-2009-1800.md): Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows re (no CVSS)
- [CVE-2009-1801](https://cve.now/CVE-2009-1801.md): Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote a (no CVSS)
- [CVE-2009-1802](https://cve.now/CVE-2009-1802.md): Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow r (no CVSS)
- [CVE-2009-1803](https://cve.now/CVE-2009-1803.md): FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt dependi (no CVSS)
- [CVE-2009-1804](https://cve.now/CVE-2009-1804.md): Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.