# CVEs published 2010-02-25 18 CVEs were published on February 25, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-0709](https://cve.now/CVE-2010-0709.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Limny 2.0 allow remote attackers to (1) hijack the authentication of users or (no CVSS) - [CVE-2010-0710](https://cve.now/CVE-2010-0710.md): SQL injection vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to ex (no CVSS) - [CVE-2010-0711](https://cve.now/CVE-2010-0711.md): Cross-site request forgery (CSRF) vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows re (no CVSS) - [CVE-2003-1589](https://cve.now/CVE-2003-1589.md): Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a deni (no CVSS) - [CVE-2003-1590](https://cve.now/CVE-2003-1590.md): Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to cause a denial of se (no CVSS) - [CVE-2010-0011](https://cve.now/CVE-2010-0011.md): The eval\_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to ex (no CVSS) - [CVE-2010-0424](https://cve.now/CVE-2010-0424.md): The edit\_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification (no CVSS) - [CVE-2010-0427](https://cve.now/CVE-2010-0427.md): sudo 1.6.x before 1.6.9p21, when the runas\_default option is used, does not properly set group memberships, which allows local users to gain (no CVSS) - [CVE-2010-0683](https://cve.now/CVE-2010-0683.md): Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Administrator 5.4.0 through 5.6.0, when JMS transport is used, allows remote authen (no CVSS) - [CVE-2010-0708](https://cve.now/CVE-2010-0708.md): Multiple unspecified vulnerabilities in (1) ns-slapd and (2) slapd.exe in Sun Directory Server Enterprise Edition 7.0, Sun Java System Direc (no CVSS) - [CVE-2010-0705](https://cve.now/CVE-2010-0705.md): Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IO (no CVSS) - [CVE-2010-0706](https://cve.now/CVE-2010-0706.md): Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to in (no CVSS) - [CVE-2010-0707](https://cve.now/CVE-2010-0707.md): Cross-site request forgery (CSRF) vulnerability in add\_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the au (no CVSS) - [CVE-2010-0118](https://cve.now/CVE-2010-0118.md): Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a - (no CVSS) - [CVE-2010-0119](https://cve.now/CVE-2010-0119.md): Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain (no CVSS) - [CVE-2010-0412](https://cve.now/CVE-2010-0412.md): stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecifie (no CVSS) - [CVE-2010-0620](https://cve.now/CVE-2010-0620.md): Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attacker (no CVSS) - [CVE-2010-0704](https://cve.now/CVE-2010-0704.md): Cross-site scripting (XSS) vulnerability in the Portlet Palette in IBM WebSphere Portal 6.0.1.5 wp6015\_008\_01 allows remote attackers to inj (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-02-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.