# CVEs published 2009-09-13

6 CVEs were published on September 13, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6731](https://cve.now/CVE-2007-6731.md): Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which (no CVSS)
- [CVE-2007-6732](https://cve.now/CVE-2007-6732.md): Multiple buffer overflows in the dtt\_load function in loaders/dtt\_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attacke (no CVSS)
- [CVE-2008-7217](https://cve.now/CVE-2008-7217.md): Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restri (no CVSS)
- [CVE-2008-7218](https://cve.now/CVE-2008-7218.md): Unspecified vulnerability in the Horde API in Horde 3.1 before 3.1.6 and 3.2 before 3.2 before 3.2-RC2; Turba H3 2.1 before 2.1.6 and 2.2 be (no CVSS)
- [CVE-2008-7219](https://cve.now/CVE-2008-7219.md): Horde Kronolith H3 2.1 before 2.1.7 and 2.2 before 2.2-RC2; Nag H3 2.1 before 2.1.4 and 2.2 before 2.2-RC2; Mnemo H3 2.1 before 2.1.2 and H3 (no CVSS)
- [CVE-2008-7220](https://cve.now/CVE-2008-7220.md): Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.