# CVEs published 2011-02-16

10 CVEs were published on February 16, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4734](https://cve.now/CVE-2010-4734.md): Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow… (no CVSS)
- [CVE-2010-4735](https://cve.now/CVE-2010-4735.md): SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote attackers to… (no CVSS)
- [CVE-2010-4736](https://cve.now/CVE-2010-4736.md): SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2010-4737](https://cve.now/CVE-2010-4737.md): SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2010-4738](https://cve.now/CVE-2010-4738.md): Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute… (no CVSS)
- [CVE-2010-4739](https://cve.now/CVE-2010-4739.md): SQL injection vulnerability in the Maian Media Silver (com\_maianmedia) component for Joomla! allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2010-4740](https://cve.now/CVE-2010-4740.md): Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to… (no CVSS)
- [CVE-2011-1034](https://cve.now/CVE-2011-1034.md): Cross-site scripting (XSS) vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2010-2928](https://cve.now/CVE-2010-2928.md): The vCenter Tomcat Management Application in VMware vCenter Server 4.1 before Update 1 stores log-on credentials in a configuration file… (no CVSS)
- [CVE-2011-0654](https://cve.now/CVE-2011-0654.md): Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-02-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.