# CVEs published 2010-09-17

19 CVEs were published on September 17, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3012](https://cve.now/CVE-2010-3012.md): Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2010-3455](https://cve.now/CVE-2010-3455.md): Cross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2010-3456](https://cve.now/CVE-2010-3456.md): Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to read arbitrary… (no CVSS)
- [CVE-2010-3457](https://cve.now/CVE-2010-3457.md): Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2010-3458](https://cve.now/CVE-2010-3458.md): SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute… (no CVSS)
- [CVE-2010-3459](https://cve.now/CVE-2010-3459.md): Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to… (no CVSS)
- [CVE-2010-3460](https://cve.now/CVE-2010-3460.md): Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary… (no CVSS)
- [CVE-2010-3461](https://cve.now/CVE-2010-3461.md): SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2010-3462](https://cve.now/CVE-2010-3462.md): Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly other versions… (no CVSS)
- [CVE-2010-3463](https://cve.now/CVE-2010-3463.md): Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote… (no CVSS)
- [CVE-2010-3464](https://cve.now/CVE-2010-3464.md): Cross-site request forgery (CSRF) vulnerability in admin/manager\_users.class.php in SantaFox 2.02, and possibly earlier, allows remote… (no CVSS)
- [CVE-2010-3465](https://cve.now/CVE-2010-3465.md): Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2010-3466](https://cve.now/CVE-2010-3466.md): Cross-site scripting (XSS) vulnerability in index.php in the hosted\_signup module in NetArt Media iBoutique.MALL 1.2 allows remote… (no CVSS)
- [CVE-2010-3467](https://cve.now/CVE-2010-3467.md): SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial module is enabled… (no CVSS)
- [CVE-2010-3011](https://cve.now/CVE-2010-3011.md): CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers… (no CVSS)
- [CVE-2010-3073](https://cve.now/CVE-2010-3073.md): SSL\_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of… (no CVSS)
- [CVE-2010-3074](https://cve.now/CVE-2010-3074.md): SSL\_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which… (no CVSS)
- [CVE-2010-3075](https://cve.now/CVE-2010-3075.md): EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for… (no CVSS)
- [CVE-2010-3324](https://cve.now/CVE-2010-3324.md): The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2010-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.