# CVEs published 2010-03-25

40 CVEs were published on March 25, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0628](https://cve.now/CVE-2010-0628.md): The spnego\_gss\_accept\_sec\_context function in lib/gssapi/spnego/spnego\_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka… (no CVSS)
- [CVE-2010-1122](https://cve.now/CVE-2010-1122.md): Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause a denial of service (memory corruption… (no CVSS)
- [CVE-2010-0164](https://cve.now/CVE-2010-0164.md): Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox… (no CVSS)
- [CVE-2010-0165](https://cve.now/CVE-2010-0165.md): The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows… (no CVSS)
- [CVE-2010-0166](https://cve.now/CVE-2010-0166.md): The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac… (no CVSS)
- [CVE-2010-0167](https://cve.now/CVE-2010-0167.md): The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and… (no CVSS)
- [CVE-2010-0168](https://cve.now/CVE-2010-0168.md): The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox… (no CVSS)
- [CVE-2010-0169](https://cve.now/CVE-2010-0169.md): The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8… (no CVSS)
- [CVE-2010-0170](https://cve.now/CVE-2010-0170.md): Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote… (no CVSS)
- [CVE-2010-0171](https://cve.now/CVE-2010-0171.md): Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3… (no CVSS)
- [CVE-2010-0172](https://cve.now/CVE-2010-0172.md): toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox… (no CVSS)
- [CVE-2010-0576](https://cve.now/CVE-2010-0576.md): Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when… (no CVSS)
- [CVE-2010-0577](https://cve.now/CVE-2010-0577.md): Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial… (no CVSS)
- [CVE-2010-0578](https://cve.now/CVE-2010-0578.md): The IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+ allows remote attackers to cause a denial… (no CVSS)
- [CVE-2010-0579](https://cve.now/CVE-2010-0579.md): The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) via a malformed SIP… (no CVSS)
- [CVE-2010-0580](https://cve.now/CVE-2010-0580.md): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2010-0581](https://cve.now/CVE-2010-0581.md): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2010-0582](https://cve.now/CVE-2010-0582.md): Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (interface queue wedge) via… (no CVSS)
- [CVE-2010-0583](https://cve.now/CVE-2010-0583.md): Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a… (no CVSS)
- [CVE-2010-0584](https://cve.now/CVE-2010-0584.md): Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2010-0585](https://cve.now/CVE-2010-0585.md): Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony… (no CVSS)
- [CVE-2010-0586](https://cve.now/CVE-2010-0586.md): Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony… (no CVSS)
- [CVE-2010-1117](https://cve.now/CVE-2010-1117.md): Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows… (no CVSS)
- [CVE-2010-1118](https://cve.now/CVE-2010-1118.md): Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown… (no CVSS)
- [CVE-2010-1119](https://cve.now/CVE-2010-1119.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X… (no CVSS)
- [CVE-2010-1120](https://cve.now/CVE-2010-1120.md): Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as… (no CVSS)
- [CVE-2010-1121](https://cve.now/CVE-2010-1121.md): Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which… (no CVSS)
- [CVE-2010-1104](https://cve.now/CVE-2010-1104.md): Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6… (no CVSS, zope2)
- [CVE-2010-1105](https://cve.now/CVE-2010-1105.md): Cross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject… (no CVSS)
- [CVE-2010-1106](https://cve.now/CVE-2010-1106.md): PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2010-1107](https://cve.now/CVE-2010-1107.md): Cross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for Drupal allows… (no CVSS)
- [CVE-2010-1108](https://cve.now/CVE-2010-1108.md): Cross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x through 6.x-1.2 for Drupal allows remote… (no CVSS)
- [CVE-2010-1109](https://cve.now/CVE-2010-1109.md): Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic\_quotes\_gpc is disabled, allow remote attackers to… (no CVSS)
- [CVE-2010-1110](https://cve.now/CVE-2010-1110.md): Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories via a .. (no CVSS)
- [CVE-2010-1111](https://cve.now/CVE-2010-1111.md): Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2010-1112](https://cve.now/CVE-2010-1112.md): Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2010-1113](https://cve.now/CVE-2010-1113.md): Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject… (no CVSS)
- [CVE-2010-1114](https://cve.now/CVE-2010-1114.md): Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2010-1115](https://cve.now/CVE-2010-1115.md): Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read… (no CVSS)
- [CVE-2010-1116](https://cve.now/CVE-2010-1116.md): LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.