Fix accidentally swapped CVE numbers

Reported by Steve Christey Coley