diff --git a/data/CVE/list b/data/CVE/list
index 752c721..e79ea37 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2593,7 +2593,7 @@ CVE-2008-2811 (The block reflow implementation in Mozilla Firefox before 2.0.0.1
 	- iceweasel 3.0
 	NOTE: Firefox 3 not affected
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 	- icedove 2.0.0.16-1
 CVE-2008-2810 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not ...)
 	- iceweasel <not-affected> (Windows-specific)
@@ -2603,18 +2603,18 @@ CVE-2008-2809 (Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, ..
 	- iceweasel 3.0
 	NOTE: Firefox 3 not affected
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 	- icedove 2.0.0.16-1
 CVE-2008-2808 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not ...)
 	{DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 CVE-2008-2807 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not ...)
 	{DSA-1621-1 DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 	- icedove 2.0.0.16-1
 CVE-2008-2806 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS ...)
 	- iceweasel <not-affected> (MacOS-specific)
@@ -2624,41 +2624,41 @@ CVE-2008-2805 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow
 	- iceweasel 3.0
 	NOTE: Firefox 3 not affected
 	- iceape 1.1.10
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 CVE-2008-2804
 	RESERVED
 CVE-2008-2803 (The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox ...)
 	{DSA-1621-1 DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0~b2-1
 	- iceape 1.1.10-1
-	- xulrunner 2.0.0.16-1
+	- xulrunner 1.9.0.1-1
 CVE-2008-2802 (Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and ...)
 	{DSA-1621-1 DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0~b2-1
 	- iceape 1.1.10-1
 	- icedove 2.0.0.16-1
-	- xulrunner 2.0.0.16-1
+	- xulrunner 1.9.0.1-1
 CVE-2008-2801 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not ...)
 	{DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0~b2-1
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 CVE-2008-2800 (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow ...)
 	{DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0~b2-1
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 CVE-2008-2799 (Multiple unspecified vulnerabilities in Mozilla Firefox before ...)
 	{DSA-1621-1 DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0~b2-1
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 	- icedove 2.0.0.16-1
 CVE-2008-2798 (Multiple unspecified vulnerabilities in Mozilla Firefox before ...)
 	{DSA-1621-1 DSA-1615-1 DSA-1607-1}
 	- iceweasel 3.0~b2-1
 	- iceape 1.1.10-1
-	- xulrunner <unfixed>
+	- xulrunner 1.9.0.1-1
 	- icedove 2.0.0.16-1
 CVE-2008-2797 (Cross-site scripting (XSS) vulnerability in MainLayout.do in ...)
 	NOT-FOR-US: ManageEngine OpUtils
