# CVEs published 2010-03-30

49 CVEs were published on March 30, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4763](https://cve.now/CVE-2009-4763.md): Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack vectors. (no CVSS)
- [CVE-2010-1216](https://cve.now/CVE-2010-1216.md): PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when register\_globals is enabled, allo (no CVSS)
- [CVE-2010-1217](https://cve.now/CVE-2010-1217.md): Directory traversal vulnerability in the JE Form Creator (com\_jeformcr) component for Joomla!, when magic\_quotes\_gpc is disabled, allows rem (no CVSS)
- [CVE-2010-1218](https://cve.now/CVE-2010-1218.md): Cross-site scripting (XSS) vulnerability in the mm\_forum extension 1.8.2 and earlier for TYPO3 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-1219](https://cve.now/CVE-2010-1219.md): Directory traversal vulnerability in the JA News (com\_janews) component 1.0 for Joomla! allows remote attackers to read arbitrary local file (no CVSS)
- [CVE-2010-0055](https://cve.now/CVE-2010-0055.md): xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modif (no CVSS)
- [CVE-2010-0060](https://cve.now/CVE-2010-0060.md): CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS)
- [CVE-2010-0062](https://cve.now/CVE-2010-0062.md): Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute ar (no CVSS)
- [CVE-2010-0063](https://cve.now/CVE-2010-0063.md): Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execut (no CVSS)
- [CVE-2010-0064](https://cve.now/CVE-2010-0064.md): DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local u (no CVSS)
- [CVE-2010-0065](https://cve.now/CVE-2010-0065.md): Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS)
- [CVE-2010-0497](https://cve.now/CVE-2010-0497.md): Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, (no CVSS)
- [CVE-2010-0498](https://cve.now/CVE-2010-0498.md): Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows l (no CVSS)
- [CVE-2010-0500](https://cve.now/CVE-2010-0500.md): Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a (no CVSS)
- [CVE-2010-0501](https://cve.now/CVE-2010-0501.md): Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary f (no CVSS)
- [CVE-2010-0502](https://cve.now/CVE-2010-0502.md): iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which migh (no CVSS)
- [CVE-2010-0503](https://cve.now/CVE-2010-0503.md): Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or (no CVSS)
- [CVE-2010-0504](https://cve.now/CVE-2010-0504.md): Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2010-0505](https://cve.now/CVE-2010-0505.md): Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2010-0506](https://cve.now/CVE-2010-0506.md): Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (applic (no CVSS)
- [CVE-2010-0507](https://cve.now/CVE-2010-0507.md): Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2010-0508](https://cve.now/CVE-2010-0508.md): Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact (no CVSS)
- [CVE-2010-0509](https://cve.now/CVE-2010-0509.md): SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group mem (no CVSS)
- [CVE-2010-0510](https://cve.now/CVE-2010-0510.md): Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticate (no CVSS)
- [CVE-2010-0511](https://cve.now/CVE-2010-0511.md): Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is o (no CVSS)
- [CVE-2010-0512](https://cve.now/CVE-2010-0512.md): The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login (no CVSS)
- [CVE-2010-0513](https://cve.now/CVE-2010-0513.md): Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2010-0514](https://cve.now/CVE-2010-0514.md): Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2010-0515](https://cve.now/CVE-2010-0515.md): QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS)
- [CVE-2010-0516](https://cve.now/CVE-2010-0516.md): Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2010-0517](https://cve.now/CVE-2010-0517.md): Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2010-0518](https://cve.now/CVE-2010-0518.md): QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS)
- [CVE-2010-0519](https://cve.now/CVE-2010-0519.md): Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2010-0520](https://cve.now/CVE-2010-0520.md): Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2010-0521](https://cve.now/CVE-2010-0521.md): Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote atta (no CVSS)
- [CVE-2010-0522](https://cve.now/CVE-2010-0522.md): Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin grou (no CVSS)
- [CVE-2010-0523](https://cve.now/CVE-2010-0523.md): Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive i (no CVSS)
- [CVE-2010-0524](https://cve.now/CVE-2010-0524.md): The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the b (no CVSS)
- [CVE-2010-0525](https://cve.now/CVE-2010-0525.md): Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multip (no CVSS)
- [CVE-2010-0526](https://cve.now/CVE-2010-0526.md): Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary co (no CVSS)
- [CVE-2010-0534](https://cve.now/CVE-2010-0534.md): Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, (no CVSS)
- [CVE-2010-0535](https://cve.now/CVE-2010-0535.md): Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for (no CVSS)
- [CVE-2010-0537](https://cve.now/CVE-2010-0537.md): DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's (no CVSS)
- [CVE-2009-2801](https://cve.now/CVE-2009-2801.md): The Application Firewall in Apple Mac OS X 10.5.8 drops unspecified firewall rules after a reboot, which might allow remote attackers to byp (no CVSS)
- [CVE-2010-0056](https://cve.now/CVE-2010-0056.md): Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code o (no CVSS)
- [CVE-2010-0057](https://cve.now/CVE-2010-0057.md): AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attac (no CVSS)
- [CVE-2010-0058](https://cve.now/CVE-2010-0058.md): freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequen (no CVSS)
- [CVE-2010-0059](https://cve.now/CVE-2010-0059.md): CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption (no CVSS)
- [CVE-2010-0533](https://cve.now/CVE-2010-0533.md): Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent direct (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.