# CVEs published 2011-05-23

7 CVEs were published on May 23, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2009-5024](https://cve.now/CVE-2009-5024.md): ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row\_limit configuration setting, and consequently conduct resource-consumpt (no CVSS)
- [CVE-2011-1575](https://cve.now/CVE-2011-1575.md): The STARTTLS implementation in ftp\_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-mid (no CVSS)
- [CVE-2011-1765](https://cve.now/CVE-2011-1765.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to (no CVSS)
- [CVE-2011-1766](https://cve.now/CVE-2011-1766.md): includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of (no CVSS)
- [CVE-2011-1920](https://cve.now/CVE-2011-1920.md): The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via (no CVSS)
- [CVE-2011-1926](https://cve.now/CVE-2011-1926.md): The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attac (no CVSS)
- [CVE-2011-2165](https://cve.now/CVE-2011-2165.md): The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.