# CVEs published 2010-03-25

40 CVEs were published on March 25, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0628](https://cve.now/CVE-2010-0628.md): The spnego\_gss\_accept\_sec\_context function in lib/gssapi/spnego/spnego\_mech.c in the SPNEGO GSS-API functionality in MIT Kerberos 5 (aka krb (no CVSS)
- [CVE-2010-1122](https://cve.now/CVE-2010-1122.md): Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause a denial of service (memory corruption and (no CVSS)
- [CVE-2010-0164](https://cve.now/CVE-2010-0164.md): Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 (no CVSS)
- [CVE-2010-0165](https://cve.now/CVE-2010-0165.md): The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remot (no CVSS)
- [CVE-2010-0166](https://cve.now/CVE-2010-0166.md): The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS (no CVSS)
- [CVE-2010-0167](https://cve.now/CVE-2010-0167.md): The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonk (no CVSS)
- [CVE-2010-0168](https://cve.now/CVE-2010-0168.md): The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 (no CVSS)
- [CVE-2010-0169](https://cve.now/CVE-2010-0169.md): The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and (no CVSS)
- [CVE-2010-0170](https://cve.now/CVE-2010-0170.md): Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attacker (no CVSS)
- [CVE-2010-0171](https://cve.now/CVE-2010-0171.md): Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow (no CVSS)
- [CVE-2010-0172](https://cve.now/CVE-2010-0172.md): toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 (no CVSS)
- [CVE-2010-0576](https://cve.now/CVE-2010-0576.md): Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Mult (no CVSS)
- [CVE-2010-0577](https://cve.now/CVE-2010-0577.md): Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2010-0578](https://cve.now/CVE-2010-0578.md): The IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+ allows remote attackers to cause a denial of (no CVSS)
- [CVE-2010-0579](https://cve.now/CVE-2010-0579.md): The SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to cause a denial of service (device reload) via a malformed SIP m (no CVSS)
- [CVE-2010-0580](https://cve.now/CVE-2010-0580.md): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malfo (no CVSS)
- [CVE-2010-0581](https://cve.now/CVE-2010-0581.md): Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malfo (no CVSS)
- [CVE-2010-0582](https://cve.now/CVE-2010-0582.md): Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denial of service (interface queue wedge) via ma (no CVSS)
- [CVE-2010-0583](https://cve.now/CVE-2010-0583.md): Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, allows remote attackers to cause a denia (no CVSS)
- [CVE-2010-0584](https://cve.now/CVE-2010-0584.md): Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2010-0585](https://cve.now/CVE-2010-0585.md): Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST (no CVSS)
- [CVE-2010-0586](https://cve.now/CVE-2010-0586.md): Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST (no CVSS)
- [CVE-2010-1117](https://cve.now/CVE-2010-1117.md): Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows . (no CVSS)
- [CVE-2010-1118](https://cve.now/CVE-2010-1118.md): Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vector (no CVSS)
- [CVE-2010-1119](https://cve.now/CVE-2010-1119.md): Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on Mac OS X 1 (no CVSS)
- [CVE-2010-1120](https://cve.now/CVE-2010-1120.md): Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demon (no CVSS)
- [CVE-2010-1121](https://cve.now/CVE-2010-1121.md): Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allow (no CVSS)
- [CVE-2010-1104](https://cve.now/CVE-2010-1104.md): Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and (no CVSS, zope2)
- [CVE-2010-1105](https://cve.now/CVE-2010-1105.md): Cross-site scripting (XSS) vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-1106](https://cve.now/CVE-2010-1106.md): PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2010-1107](https://cve.now/CVE-2010-1107.md): Cross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for Drupal allows remote (no CVSS)
- [CVE-2010-1108](https://cve.now/CVE-2010-1108.md): Cross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x through 6.x-1.2 for Drupal allows remote au (no CVSS)
- [CVE-2010-1109](https://cve.now/CVE-2010-1109.md): Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magic\_quotes\_gpc is disabled, allow remote attackers to execute (no CVSS)
- [CVE-2010-1110](https://cve.now/CVE-2010-1110.md): Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories via a .. (no CVSS)
- [CVE-2010-1111](https://cve.now/CVE-2010-1111.md): Multiple cross-site scripting (XSS) vulnerabilities in Jokes Complete Website allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-1112](https://cve.now/CVE-2010-1112.md): Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web script or HTML via the ca (no CVSS)
- [CVE-2010-1113](https://cve.now/CVE-2010-1113.md): Cross-site scripting (XSS) vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2010-1114](https://cve.now/CVE-2010-1114.md): Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2010-1115](https://cve.now/CVE-2010-1115.md): Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbit (no CVSS)
- [CVE-2010-1116](https://cve.now/CVE-2010-1116.md): LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to down (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.