CVEs published in May 2009
364 vulnerabilities, 82 critical, 1 exploited.
- drupalUnspecified vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used in vbDrupal...4.3 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 5.x before 5.17 and 6.x before 6.11, as used...4.3 Medium
- linux kernelRace condition in the ptrace_attach function in kernel/ptrace.c in the Linux kernel before 2.6.30...6.9 Medium
- directadminJBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a...6.9 Medium
- directadminCMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain...8.5 High
- icewarp email server, webmail server +1 moreCRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in...4.3 Medium
- icewarp email server, webmail server +1 moreMultiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware...6.5 Medium
- icewarp email server, webmail server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server...4.3 Medium
- linux kernelThe selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux...4.4 Medium
- mcafee groupshieldMcAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus...9.3 High
- sendmailHeap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of...5.0 Medium
- mortbay jettyCross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers...4.3 Medium
- mortbay jettyDirectory traversal in Mort Bay Jetty5.0 Medium
- ibm tivoli storage manager clientThe IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL...7.1 High
- ibm tivoli storage manager client, tivoli storage manager express +1 moreUnspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0...7.5 High
- ibm tivoli storage manager client, tivoli storage manager express +1 moreBuffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1...10.0 High
- hp openview network node managerUnspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53...10.0 High
- cscopeMultiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code...9.3 High
- ibm tivoli storage manager client, tivoli storage manager express +1 moreMultiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM...10.0 High
- pecio-cms pecio cmsDirectory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read...5.0 Medium
- beltaneCross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers...6.8 Medium
- klever pumpkinPumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write...5.0 Medium
- minddezign photo galleryThe admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative...5.1 Medium
- minddezign photo gallerySQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute...5.1 Medium
- minddezign photo gallerySQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled,...5.1 Medium
- symantec norton ghostMultiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in...4.3 Medium
- icewarp merak mail serverStack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp...7.5 High
- christos zoulas fileHeap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00...6.8 Medium
- google chromeGoogle Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer...5.0 Medium
- konstanty bialkowski libmodplugBuffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows...6.8 Medium
- quaggaThe BGP daemon (bgpd) in Quagga 0.99.11 and earlier allows remote attackers to cause a denial of...5.0 Medium
- keir davis x-forumStatic code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators...6.5 Medium
- microsoft windows xpGDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite...7.8 High
- koschtit image galleryMultiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote...7.5 High
- myiosoft ajaxportalSQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote...7.5 High
- keir davis x-forumSQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2...7.5 High
- jeremy powers lizardware cmsSQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows...7.5 High
- codewiz geekigeekiMultiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow...5.0 Medium
- galaxyscripts mini file hostUnrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute...6.8 Medium
- drupal nodeaccess userreferenceThe Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a...7.5 High
- intelliants elitiusSQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute...6.8 Medium
- drupal news pageSQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote...6.5 Medium
- xigla absolute control panel xeAbsolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain...7.5 High
- tigerdmsMultiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS)...7.5 High
- matteoiammarrone s-cmsDirectory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote...7.5 High
- exifCross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x...4.3 Medium
- projectcmsSQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to...6.8 Medium
- adobe flash media serverUnspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2,...7.5 High
- francis james franklin libwmf, opensuse +1 moreUse-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context...7.5 High
- scripts-for-sites ez adult directorySQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows...7.5 High
- Show moreLoading…