# CVEs published 2010-04-30

16 CVEs were published on April 30, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1650](https://cve.now/CVE-2010-1650.md): IBM WebSphere Application Server (WAS) 6.0.x before 6.0.2.41, 6.1.x before 6.1.0.31, and 7.0.x before 7.0.0.11, when the -trace option (aka (no CVSS)
- [CVE-2010-1651](https://cve.now/CVE-2010-1651.md): IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.31 and 7.0.x before 7.0.0.11, when Basic authentication and SIP tracing (aka full (no CVSS)
- [CVE-2010-1652](https://cve.now/CVE-2010-1652.md): Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attackers to read arbitra (no CVSS)
- [CVE-2010-1653](https://cve.now/CVE-2010-1653.md): Directory traversal vulnerability in graphics.php in the Graphics (com\_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attacke (no CVSS)
- [CVE-2010-1654](https://cve.now/CVE-2010-1654.md): Multiple SQL injection vulnerabilities in system\_member\_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execut (no CVSS)
- [CVE-2010-1655](https://cve.now/CVE-2010-1655.md): Cross-site scripting (XSS) vulnerability in User/User\_ChkLogin.asp in PowerEasy 2006 and PowerEasy SiteWeaver 6.8 allows remote attackers to (no CVSS)
- [CVE-2010-1656](https://cve.now/CVE-2010-1656.md): SQL injection vulnerability in the Airiny ABC (com\_abc) component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2010-1657](https://cve.now/CVE-2010-1657.md): Directory traversal vulnerability in the SmartSite (com\_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2010-1658](https://cve.now/CVE-2010-1658.md): Directory traversal vulnerability in the Code-Garage NoticeBoard (com\_noticeboard) component 1.3 for Joomla! allows remote attackers to read (no CVSS)
- [CVE-2010-1659](https://cve.now/CVE-2010-1659.md): Directory traversal vulnerability in the Ultimate Portfolio (com\_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to rea (no CVSS)
- [CVE-2010-1660](https://cve.now/CVE-2010-1660.md): SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2010-1661](https://cve.now/CVE-2010-1661.md): Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQL commands via the ( (no CVSS)
- [CVE-2010-1662](https://cve.now/CVE-2010-1662.md): Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-1663](https://cve.now/CVE-2010-1663.md): The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Orig (no CVSS)
- [CVE-2010-1664](https://cve.now/CVE-2010-1664.md): Google Chrome before 4.1.249.1064 does not properly handle HTML5 media, which allows remote attackers to cause a denial of service (memory c (no CVSS)
- [CVE-2010-1665](https://cve.now/CVE-2010-1665.md): Google Chrome before 4.1.249.1064 does not properly handle fonts, which allows remote attackers to cause a denial of service (memory corrupt (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-04-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.