CVEs published in May 2009
364 vulnerabilities, 82 critical, 1 exploited.
- b2evolution starrating pluginMultiple SQL injection vulnerabilities in the Starrating plugin before 0.7.7 for b2evolution...7.5 High
- instinct e-commerce pluginUnrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and...6.8 Medium
- bookingcentre booking system for hotels groupMultiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking...7.5 High
- bookingcentre booking system for hotels groupSQL injection vulnerability in hotel_habitaciones.php in Venalsur Booking Centre Booking System...7.5 High
- xerox workcentreXerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645...10.0 High
- easy-scripts answer and question scriptMultiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question...6.5 Medium
- easy-scripts answer and question scriptCross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and...4.3 Medium
- tinybutstrongDirectory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0...7.8 High
- 2daybiz business community scriptadmin/adminaddeditdetails.php in Business Community Script does not properly restrict access,...7.5 High
- 2daybiz business community scriptSQL injection vulnerability in admin/member_details.php in 2daybiz Business Community Script...7.5 High
- tenfourzero shutterMultiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to...7.5 High
- bicluc beliveDirectory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read...7.5 High
- ultrafunk popcornHeap-based buffer overflow in popcorn.exe in Ultrafunk Popcorn 1.87 allows remote POP3 servers to...9.3 High
- mini-stream rm downloaderStack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to...9.3 High
- mini-stream easy rm-mp3 converterMultiple stack-based buffer overflows in Mini-stream Easy RM-MP3 Converter 3.0.0.7 allow remote...9.3 High
- sorinara streaming audio playerStack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to...9.3 High
- sorinara soritong mp3 playerStack-based buffer overflow in Sorinara Soritong MP3 Player 1.0 allows remote attackers to...9.3 High
- mini-stream to mp3 converterMultiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote...9.3 High
- mini-stream ripperMultiple stack-based buffer overflows in Mini-stream Ripper 3.0.1.1 allow remote attackers to...9.3 High
- nucleustechnologies kernel recoveryStack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows...9.3 High
- nucleustechnologies kernel recoveryStack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user...9.3 High
- t-dreams job career packageTechno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain...7.5 High
- simplecustomer simple customerprofile.php in Simple Customer 1.3 does not require administrative authentication, which allows...6.4 Medium
- carnegie mellon university cyrus-saslMultiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote...7.5 High
- ipsec-toolsMultiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of...5.0 Medium
- gnome evolutionThe Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the ...2.1 Low
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel...4.4 Medium
- antony lesuisse ajaxtermajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers...6.8 Medium
- squirrelmailfunctions/mime.php in SquirrelMail before 1.4.18 does not protect the application's content from...4.3 Medium
- squirrelmailSession fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack...5.8 Medium
- squirrelmailThe map_yp_alias function in functions/imap_general.php in SquirrelMail before 1.4.18 and NaSMail...6.8 Medium
- squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in SquirrelMail before 1.4.18 and NaSMail...4.3 Medium
- klinzmann application access serverApplication Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in...5.5 Medium
- klinzmann application access serverApplication Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin...7.5 High
- klinzmann application access serverMultiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access...6.8 Medium
- hp data protector expressUnspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP...7.2 High
- apple safariArray index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3...9.3 High
- apple mac os x, mac os x server +1 moreThe Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10...6.8 Medium
- apple mac os x, mac os x server +1 moreHelp Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames...6.8 Medium
- apple mac os x, mac os x server +1 moreHelp Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain...6.8 Medium
- apple safariCross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac...4.3 Medium
- apple mac os x, mac os x server +1 moreThe OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an...6.4 Medium
- apple mac os x, mac os x server +1 moreQuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to...6.8 Medium
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows...6.8 Medium
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web...6.8 Medium
- apple mac os x, mac os x server +1 moreLaunch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause...4.3 Medium
- apple mac os x, mac os x server +1 moreInteger underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2...6.8 Medium
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before...6.8 Medium
- apple mac os x, mac os x server +1 moreInternational Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac...4.3 Medium
- apple mac os x, mac os x server +1 moreiChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM)...7.5 High
- Show moreLoading…