Houssamix MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)
dos windows OSVDB-51502;CVE-2009-0175

Patrick Webster PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting
webapps java

Erik IBM Websphere DataPower XML Security Gateway 3.6.1 XS40 - Remote Denial of Service
dos multiple CVE-2009-0120;OSVDB-52605

Federico Muttis Openfire 3.6.2 - 'log.jsp' Directory Traversal
webapps jsp CVE-2009-0497;OSVDB-51426

Federico Muttis Openfire 3.6.2 - 'log.jsp' Cross-Site Scripting
webapps jsp CVE-2009-0496;OSVDB-51420

Federico Muttis Openfire 3.6.2 - 'user-properties.jsp' Cross-Site Scripting
webapps jsp CVE-2009-0496;OSVDB-51422

Federico Muttis Openfire 3.6.2 - 'group-summary.jsp' Cross-Site Scripting
webapps jsp CVE-2009-0496;OSVDB-51421

Cnaph IntelliTamper (2.07/2.08) - Language Catalog Overflow (SEH)
local windows

Phil Anope IRC Services With bs_fantasy_ext 1.2.0-RC1 - mIRC script
remote windows

StAkeR XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution
webapps php OSVDB-51447;OSVDB-51446;OSVDB-51445;OSVDB-51444

darkjoker Pizzis CMS 1.5.1 - Blind SQL Injection
webapps php OSVDB-51307

Khashayar Fereidani PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
webapps php OSVDB-51997

DATA_SNIPER GOM Player 2.0.12.3375 - '.asx' Local Stack Overflow
local windows

zuc Samba < 3.0.20 - Remote Heap Overflow
remote linux 445

StAkeR CuteNews 1.4.6 - 'ip ban' Authorized Cross-Site Scripting / Command Execution
webapps php OSVDB-51386;OSVDB-51385

stylextra tadbook2 Module for XOOPS - 'open_book.php' SQL Injection
webapps php OSVDB-106967