# CVEs published 2010-03-10 32 CVEs were published on March 10, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2009-4680](https://cve.now/CVE-2009-4680.md): SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st par (no CVSS) - [CVE-2009-4681](https://cve.now/CVE-2009-4681.md): Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2009-4682](https://cve.now/CVE-2009-4682.md): Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2009-4683](https://cve.now/CVE-2009-4683.md): Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via dire (no CVSS) - [CVE-2009-4684](https://cve.now/CVE-2009-4684.md): Cross-site scripting (XSS) vulnerability in index.php in EZodiak allows remote attackers to inject arbitrary web script or HTML via the sign (no CVSS) - [CVE-2009-4685](https://cve.now/CVE-2009-4685.md): Cross-site scripting (XSS) vulnerability in celebrities.php in PHP Scripts Now Astrology allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2009-4686](https://cve.now/CVE-2009-4686.md): Cross-site scripting (XSS) vulnerability in account.php in phplemon AdQuick 2.2.1 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2009-4687](https://cve.now/CVE-2009-4687.md): SQL injection vulnerability in silentum\_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2009-4688](https://cve.now/CVE-2009-4688.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to injec (no CVSS) - [CVE-2009-4689](https://cve.now/CVE-2009-4689.md): SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2009-4690](https://cve.now/CVE-2009-4690.md): Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web s (no CVSS) - [CVE-2009-4691](https://cve.now/CVE-2009-4691.md): SQL injection vulnerability in addlink.php in Classified Linktrader Script allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2009-4692](https://cve.now/CVE-2009-4692.md): Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2009-4693](https://cve.now/CVE-2009-4693.md): Multiple PHP remote file inclusion vulnerabilities in GraFX MiniCWB 2.3.0 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2009-4694](https://cve.now/CVE-2009-4694.md): Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2009-4695](https://cve.now/CVE-2009-4695.md): SQL injection vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to execute arbitrary SQL commands via the f (no CVSS) - [CVE-2009-4696](https://cve.now/CVE-2009-4696.md): SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter i (no CVSS) - [CVE-2009-4697](https://cve.now/CVE-2009-4697.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2010-0257](https://cve.now/CVE-2010-0257.md): Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a (no CVSS) - [CVE-2010-0258](https://cve.now/CVE-2010-0258.md): Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Offic (no CVSS) - [CVE-2010-0260](https://cve.now/CVE-2010-0260.md): Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Wo (no CVSS) - [CVE-2010-0261](https://cve.now/CVE-2010-0261.md): Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 Fil (no CVSS) - [CVE-2010-0262](https://cve.now/CVE-2010-0262.md): Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers t (no CVSS) - [CVE-2010-0263](https://cve.now/CVE-2010-0263.md): Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Offic (no CVSS) - [CVE-2010-0264](https://cve.now/CVE-2010-0264.md): Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel fi (no CVSS) - [CVE-2010-0265](https://cve.now/CVE-2010-0265.md): Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrar (no CVSS) - [CVE-2010-0447](https://cve.now/CVE-2010-0447.md): The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and valid (no CVSS) - [CVE-2010-0806](https://cve.now/CVE-2010-0806.md): Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote at (CVSS 8.8, KEV) - [CVE-2010-0959](https://cve.now/CVE-2010-0959.md): Cross-site scripting (XSS) vulnerability in WebEditor/Authentication/LoginPage.aspx in IBM ENOVIA SmarTeam 5 allows remote attackers to inje (no CVSS) - [CVE-2010-0960](https://cve.now/CVE-2010-0960.md): Buffer overflow in qosmod in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. (no CVSS) - [CVE-2010-0961](https://cve.now/CVE-2010-0961.md): Buffer overflow in qoslist in bos.net.tcp.server in IBM AIX 6.1 and VIOS 2.1 allows local users to gain privileges via unspecified vectors. (no CVSS) - [CVE-2010-0962](https://cve.now/CVE-2010-0962.md): The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-03-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.