Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2009-04-01	CVE-2009-1219	Improper Input Validation vulnerability in SUN Java System Calendar Server and ONE Calendar Server Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter. network low complexity sun CWE-20	5.0
2009-04-01	CVE-2009-1218	Cross-Site Scripting vulnerability in SUN Java System Calendar Server and ONE Calendar Server Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml. network sun CWE-79	4.3