# CVEs published 2010-03-16

28 CVEs were published on March 16, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6733](https://cve.now/CVE-2007-6733.md): The nfs\_lock function in fs/nfs/file.c in the Linux kernel 2.6.9 does not properly remove POSIX locks on files that are setgid without group (no CVSS)
- [CVE-2010-0397](https://cve.now/CVE-2010-0397.md): The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc\_decode\_request f (no CVSS)
- [CVE-2010-0727](https://cve.now/CVE-2010-0727.md): The gfs2\_lock function in the Linux kernel before 2.6.34-rc1-next-20100312, and the gfs\_lock function in the Linux kernel on Red Hat Enterpr (no CVSS)
- [CVE-2010-0729](https://cve.now/CVE-2010-0729.md): A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on a (no CVSS)
- [CVE-2010-0793](https://cve.now/CVE-2010-0793.md): Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (no CVSS)
- [CVE-2010-0976](https://cve.now/CVE-2010-0976.md): Acidcat CMS 3.5.x does not prevent access to install.asp after installation finishes, which might allow remote attackers to restart the inst (no CVSS)
- [CVE-2010-0977](https://cve.now/CVE-2010-0977.md): PD PORTAL 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS)
- [CVE-2010-0978](https://cve.now/CVE-2010-0978.md): KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attac (no CVSS)
- [CVE-2010-0979](https://cve.now/CVE-2010-0979.md): Cross-site scripting (XSS) vulnerability in display.php in Obsession-Design Image-Gallery (ODIG) 1.1 allows remote attackers to inject arbit (no CVSS)
- [CVE-2010-0980](https://cve.now/CVE-2010-0980.md): SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the s (no CVSS)
- [CVE-2010-0981](https://cve.now/CVE-2010-0981.md): SQL injection vulnerability in the TPJobs (com\_tpjobs) component for Joomla! allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-0982](https://cve.now/CVE-2010-0982.md): Directory traversal vulnerability in the CARTwebERP (com\_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary (no CVSS)
- [CVE-2010-0983](https://cve.now/CVE-2010-0983.md): PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register\_globals is enabled, allows remot (no CVSS)
- [CVE-2010-0984](https://cve.now/CVE-2010-0984.md): Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attacker (no CVSS)
- [CVE-2010-0985](https://cve.now/CVE-2010-0985.md): Directory traversal vulnerability in the Abbreviations Manager (com\_abbrev) component 1.1 for Joomla! allows remote attackers to include and (no CVSS)
- [CVE-2010-0963](https://cve.now/CVE-2010-0963.md): Cross-site scripting (XSS) vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-0964](https://cve.now/CVE-2010-0964.md): SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands via the id parameter i (no CVSS)
- [CVE-2010-0965](https://cve.now/CVE-2010-0965.md): Jevci Siparis Formu Scripti stores sensitive information under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2010-0966](https://cve.now/CVE-2010-0966.md): PHP remote file inclusion vulnerability in inc/config.php in deV!L\`z Clanportal (DZCP) 1.5.2, when register\_globals is enabled, allows remot (no CVSS)
- [CVE-2010-0967](https://cve.now/CVE-2010-0967.md): Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magic\_quotes\_gpc is disabled, allow remote attackers to include an (no CVSS)
- [CVE-2010-0968](https://cve.now/CVE-2010-0968.md): SQL injection vulnerability in bannershow.php in Geekhelps ADMP 1.01 allows remote attackers to execute arbitrary SQL commands via the click (no CVSS)
- [CVE-2010-0969](https://cve.now/CVE-2010-0969.md): Unbound before 1.4.3 does not properly align structures on 64-bit platforms, which allows remote attackers to cause a denial of service (dae (no CVSS)
- [CVE-2010-0970](https://cve.now/CVE-2010-0970.md): SQL injection vulnerability in phpmylogon.php in PhpMyLogon 2 allows remote attackers to execute arbitrary SQL commands via the username par (no CVSS)
- [CVE-2010-0971](https://cve.now/CVE-2010-0971.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject (no CVSS)
- [CVE-2010-0972](https://cve.now/CVE-2010-0972.md): Directory traversal vulnerability in the GCalendar (com\_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execut (no CVSS)
- [CVE-2010-0973](https://cve.now/CVE-2010-0973.md): SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2010-0974](https://cve.now/CVE-2010-0974.md): Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) (no CVSS)
- [CVE-2010-0975](https://cve.now/CVE-2010-0975.md): PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.