# CVEs published 2011-04-19

5 CVEs were published on April 19, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5071](https://cve.now/CVE-2009-5071.md): Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file (no CVSS)
- [CVE-2011-0412](https://cve.now/CVE-2011-0412.md): Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which all (no CVSS)
- [CVE-2011-1721](https://cve.now/CVE-2011-1721.md): Cross-site request forgery (CSRF) vulnerability in php/partie\_administrateur/administration.php in WebJaxe 1.02 allows remote attackers to h (no CVSS)
- [CVE-2011-1722](https://cve.now/CVE-2011-1722.md): Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec\_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers (no CVSS)
- [CVE-2011-1723](https://cve.now/CVE-2011-1723.md): Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject ar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.