# CVEs published 2010-05-07

43 CVEs were published on May 7, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4854](https://cve.now/CVE-2009-4854.md): addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter. (no CVSS)
- [CVE-2010-1859](https://cve.now/CVE-2010-1859.md): SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS)
- [CVE-2010-1860](https://cve.now/CVE-2010-1860.md): The html\_entity\_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive… (no CVSS)
- [CVE-2010-1861](https://cve.now/CVE-2010-1861.md): The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory… (no CVSS)
- [CVE-2010-1862](https://cve.now/CVE-2010-1862.md): The chunk\_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive… (no CVSS)
- [CVE-2010-1863](https://cve.now/CVE-2010-1863.md): SQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and earlier allows remote attackers to… (no CVSS)
- [CVE-2010-1864](https://cve.now/CVE-2010-1864.md): The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive… (no CVSS)
- [CVE-2010-1865](https://cve.now/CVE-2010-1865.md): Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1)… (no CVSS)
- [CVE-2010-1866](https://cve.now/CVE-2010-1866.md): The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a… (no CVSS)
- [CVE-2010-1867](https://cve.now/CVE-2010-1867.md): SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in… (no CVSS)
- [CVE-2010-1868](https://cve.now/CVE-2010-1868.md): The (1) sqlite\_single\_query and (2) sqlite\_array\_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2… (no CVSS)
- [CVE-2010-1853](https://cve.now/CVE-2010-1853.md): Multiple stack-based buffer overflows in the tr\_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote… (no CVSS)
- [CVE-2010-1854](https://cve.now/CVE-2010-1854.md): Cross-site scripting (XSS) vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2010-1855](https://cve.now/CVE-2010-1855.md): SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2010-1856](https://cve.now/CVE-2010-1856.md): Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic\_quotes\_gpc is disabled, allows remote… (no CVSS)
- [CVE-2010-1857](https://cve.now/CVE-2010-1857.md): SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS)
- [CVE-2010-1858](https://cve.now/CVE-2010-1858.md): Directory traversal vulnerability in the SMEStorage (com\_smestorage) component before 1.1 for Joomla! allows remote attackers to read… (no CVSS)
- [CVE-2009-4846](https://cve.now/CVE-2009-4846.md): Multiple buffer overflows in Deliantra Server before 2.82 allow remote attackers to execute arbitrary code via vectors related to (1) the… (no CVSS)
- [CVE-2009-4847](https://cve.now/CVE-2009-4847.md): Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty… (no CVSS)
- [CVE-2009-4848](https://cve.now/CVE-2009-4848.md): Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers… (no CVSS)
- [CVE-2009-4849](https://cve.now/CVE-2009-4849.md): Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote… (no CVSS)
- [CVE-2009-4850](https://cve.now/CVE-2009-4850.md): The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneURL property value… (no CVSS)
- [CVE-2009-4851](https://cve.now/CVE-2009-4851.md): The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation… (no CVSS)
- [CVE-2009-4852](https://cve.now/CVE-2009-4852.md): Multiple cross-site scripting (XSS) vulnerabilities in SemanticScuttle before 0.94.1 allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2009-4853](https://cve.now/CVE-2009-4853.md): Multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject… (no CVSS)
- [CVE-2010-1173](https://cve.now/CVE-2010-1173.md): The sctp\_process\_unk\_param function in net/sctp/sm\_make\_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows… (no CVSS)
- [CVE-2010-1437](https://cve.now/CVE-2010-1437.md): Race condition in the find\_keyring\_by\_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local… (no CVSS)
- [CVE-2010-1451](https://cve.now/CVE-2010-1451.md): The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S in the Linux kernel before 2.6.33 on the SPARC platform does not properly… (no CVSS)
- [CVE-2010-1689](https://cve.now/CVE-2010-1689.md): The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows… (no CVSS)
- [CVE-2010-1690](https://cve.now/CVE-2010-1690.md): The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows… (no CVSS)
- [CVE-2009-4842](https://cve.now/CVE-2009-4842.md): Multiple cross-site scripting (XSS) vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2009-4843](https://cve.now/CVE-2009-4843.md): ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not require administrative authentication for JBoss console access, which allows… (no CVSS)
- [CVE-2009-4844](https://cve.now/CVE-2009-4844.md): ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict access to the /status URI on port 9080, which allows remote attackers to obtain… (no CVSS)
- [CVE-2009-4845](https://cve.now/CVE-2009-4845.md): The configuration page in ToutVirtual VirtualIQ Pro 3.2 build 7882 contains cleartext SSH credentials, which allows remote attackers to… (no CVSS)
- [CVE-2010-0827](https://cve.now/CVE-2010-0827.md): Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application… (no CVSS)
- [CVE-2010-0829](https://cve.now/CVE-2010-0829.md): Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application… (no CVSS)
- [CVE-2010-1143](https://cve.now/CVE-2010-1143.md): Cross-site scripting (XSS) vulnerability in VMware View (formerly Virtual Desktop Manager or VDM) 3.1.x before 3.1.3 build 252693 allows… (no CVSS)
- [CVE-2010-1167](https://cve.now/CVE-2010-1167.md): fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which… (no CVSS)
- [CVE-2010-1440](https://cve.now/CVE-2010-1440.md): Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a… (no CVSS)
- [CVE-2010-1453](https://cve.now/CVE-2010-1453.md): Cross-site scripting (XSS) vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2010-1549](https://cve.now/CVE-2010-1549.md): Unspecified vulnerability in the Agent in HP LoadRunner before 9.50 and HP Performance Center before 9.50 allows remote attackers to… (no CVSS)
- [CVE-2010-1851](https://cve.now/CVE-2010-1851.md): Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner… (no CVSS)
- [CVE-2010-1852](https://cve.now/CVE-2010-1852.md): Microsoft Internet Explorer, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-05-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.