# CVEs published 2010-02-05

17 CVEs were published on February 5, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1577](https://cve.now/CVE-2003-1577.md): Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote (no CVSS)
- [CVE-2003-1578](https://cve.now/CVE-2003-1578.md): Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote (no CVSS)
- [CVE-2003-1579](https://cve.now/CVE-2003-1579.md): Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not i (no CVSS)
- [CVE-2003-1580](https://cve.now/CVE-2003-1580.md): The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether (no CVSS)
- [CVE-2003-1581](https://cve.now/CVE-2003-1581.md): The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into (no CVSS)
- [CVE-2003-1582](https://cve.now/CVE-2003-1582.md): Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject (no CVSS)
- [CVE-2003-1583](https://cve.now/CVE-2003-1583.md): Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client do (no CVSS)
- [CVE-2003-1584](https://cve.now/CVE-2003-1584.md): Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML via a crafted client do (no CVSS)
- [CVE-2003-1585](https://cve.now/CVE-2003-1585.md): Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client (no CVSS)
- [CVE-2003-1586](https://cve.now/CVE-2003-1586.md): Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agen (no CVSS)
- [CVE-2003-1587](https://cve.now/CVE-2003-1587.md): Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent (no CVSS)
- [CVE-2009-2751](https://cve.now/CVE-2009-2751.md): IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact (no CVSS)
- [CVE-2009-2752](https://cve.now/CVE-2009-2752.md): IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive informati (no CVSS)
- [CVE-2009-4185](https://cve.now/CVE-2009-4185.md): Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers (no CVSS)
- [CVE-2010-0557](https://cve.now/CVE-2010-0557.md): IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leve (no CVSS)
- [CVE-2010-0558](https://cve.now/CVE-2010-0558.md): The default configuration of Oracle OpenSolaris snv\_77 through snv\_131 allows attackers to have an unspecified impact via vectors related to (no CVSS)
- [CVE-2010-0559](https://cve.now/CVE-2010-0559.md): The default configuration of Oracle OpenSolaris snv\_91 through snv\_131 allows attackers to have an unspecified impact via vectors related to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.