# CVEs published 2010-04-07

11 CVEs were published on April 7, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2008-7254](https://cve.now/CVE-2008-7254.md): Directory traversal vulnerability in includes/template-loader.php in Irmin CMS (formerly Pepsi CMS) 0.5 and 0.6 BETA2, when register\_globals (no CVSS)
- [CVE-2010-1299](https://cve.now/CVE-2010-1299.md): Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic\_quotes\_gpc is disabled and register\_ (no CVSS)
- [CVE-2010-1300](https://cve.now/CVE-2010-1300.md): SQL injection vulnerability in index.php in Yamamah (aka Dove Photo Album) 1.00 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-1301](https://cve.now/CVE-2010-1301.md): SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via the host\_id paramete (no CVSS)
- [CVE-2010-1302](https://cve.now/CVE-2010-1302.md): Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com\_dwgraphs) component 1.0 for Joomla! allows remote attacke (no CVSS)
- [CVE-2010-0400](https://cve.now/CVE-2010-0400.md): SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username. (no CVSS)
- [CVE-2010-0629](https://cve.now/CVE-2010-0629.md): Use-after-free vulnerability in kadmin/server/server\_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authent (no CVSS)
- [CVE-2010-1186](https://cve.now/CVE-2010-1186.md): Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attacke (no CVSS)
- [CVE-2010-1221](https://cve.now/CVE-2010-1221.md): CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request. (no CVSS)
- [CVE-2010-1222](https://cve.now/CVE-2010-1222.md): CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SO (no CVSS)
- [CVE-2010-1223](https://cve.now/CVE-2010-1223.md): Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the w (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.