# CVEs published 2009-06-25

13 CVEs were published on June 25, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-2213](https://cve.now/CVE-2009-2213.md): The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware (no CVSS)
- [CVE-2009-2214](https://cve.now/CVE-2009-2214.md): The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) v (no CVSS)
- [CVE-2009-2215](https://cve.now/CVE-2009-2215.md): Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via ve (no CVSS)
- [CVE-2009-2216](https://cve.now/CVE-2009-2216.md): Cross-site scripting (XSS) vulnerability in CMD\_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2009-2217](https://cve.now/CVE-2009-2217.md): Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid (no CVSS)
- [CVE-2009-2218](https://cve.now/CVE-2009-2218.md): Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register\_globals is enabled, allow remote attackers to (no CVSS)
- [CVE-2009-2219](https://cve.now/CVE-2009-2219.md): Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2009-1201](https://cve.now/CVE-2009-1201.md): Eval injection vulnerability in the csco\_wrap\_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) devic (no CVSS)
- [CVE-2009-1202](https://cve.now/CVE-2009-1202.md): WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certa (no CVSS)
- [CVE-2009-1203](https://cve.now/CVE-2009-1203.md): WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own l (no CVSS)
- [CVE-2009-2210](https://cve.now/CVE-2009-2210.md): Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or p (no CVSS)
- [CVE-2009-2211](https://cve.now/CVE-2009-2211.md): Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows (no CVSS)
- [CVE-2009-2212](https://cve.now/CVE-2009-2212.md): The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.