# CVEs published 2010-05-04

34 CVEs were published on May 4, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0401](https://cve.now/CVE-2010-0401.md): OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote aut (no CVSS)
- [CVE-2010-0402](https://cve.now/CVE-2010-0402.md): OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of (no CVSS)
- [CVE-2010-0406](https://cve.now/CVE-2010-0406.md): OpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and daemon crash) by performing incomp (no CVSS)
- [CVE-2010-1279](https://cve.now/CVE-2010-1279.md): Multiple unspecified vulnerabilities in Adobe Photoshop CS4 11.x before 11.0.1 allow user-assisted remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2010-1686](https://cve.now/CVE-2010-1686.md): Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-assisted remote attacker (no CVSS)
- [CVE-2009-4834](https://cve.now/CVE-2009-4834.md): lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now\_con (no CVSS)
- [CVE-2010-0101](https://cve.now/CVE-2010-0101.md): The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, (no CVSS)
- [CVE-2010-0594](https://cve.now/CVE-2010-0594.md): Cross-site scripting (XSS) vulnerability in Cisco Router and Security Device Manager (SDM) allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2010-1431](https://cve.now/CVE-2010-1431.md): SQL injection vulnerability in templates\_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-1685](https://cve.now/CVE-2010-1685.md): Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file co (no CVSS)
- [CVE-2010-1687](https://cve.now/CVE-2010-1687.md): Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash) and possibly execut (no CVSS)
- [CVE-2010-1701](https://cve.now/CVE-2010-1701.md): SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL commands via the cat (no CVSS)
- [CVE-2010-1702](https://cve.now/CVE-2010-1702.md): SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-1703](https://cve.now/CVE-2010-1703.md): Multiple cross-site scripting (XSS) vulnerabilities in index\_search.php in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers t (no CVSS)
- [CVE-2010-1704](https://cve.now/CVE-2010-1704.md): Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2010-1705](https://cve.now/CVE-2010-1705.md): SQL injection vulnerability in casting\_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum paramet (no CVSS)
- [CVE-2010-1706](https://cve.now/CVE-2010-1706.md): Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via ( (no CVSS)
- [CVE-2010-1707](https://cve.now/CVE-2010-1707.md): Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2010-1708](https://cve.now/CVE-2010-1708.md): Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2010-1709](https://cve.now/CVE-2010-1709.md): Multiple cross-site scripting (XSS) vulnerabilities in upload.cgi in G5-Scripts Auto-Img-Gallery 1.1 allow remote attackers to inject arbitr (no CVSS)
- [CVE-2010-1710](https://cve.now/CVE-2010-1710.md): Directory traversal vulnerability in login.php in Siestta 2.0, when register\_globals is enabled, allows remote attackers to include and exec (no CVSS)
- [CVE-2010-1711](https://cve.now/CVE-2010-1711.md): Cross-site scripting (XSS) vulnerability in carga\_foto\_al.php in Siestta 2.0, when register\_globals is enabled, allows remote attackers to i (no CVSS)
- [CVE-2010-1712](https://cve.now/CVE-2010-1712.md): Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2010-1713](https://cve.now/CVE-2010-1713.md): SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter (no CVSS)
- [CVE-2010-1714](https://cve.now/CVE-2010-1714.md): Directory traversal vulnerability in the Arcade Games (com\_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary (no CVSS)
- [CVE-2010-1715](https://cve.now/CVE-2010-1715.md): Directory traversal vulnerability in the Online Examination (aka Online Exam or com\_onlineexam) component 1.5.0 for Joomla! allows remote at (no CVSS)
- [CVE-2010-1716](https://cve.now/CVE-2010-1716.md): SQL injection vulnerability in the Agenda Address Book (com\_agenda) component 1.0.1 for Joomla! allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-1717](https://cve.now/CVE-2010-1717.md): Directory traversal vulnerability in the iF surfALERT (com\_if\_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary (no CVSS)
- [CVE-2010-1718](https://cve.now/CVE-2010-1718.md): Directory traversal vulnerability in archeryscores.php in the Archery Scores (com\_archeryscores) component 1.0.6 for Joomla! allows remote a (no CVSS)
- [CVE-2010-1719](https://cve.now/CVE-2010-1719.md): Directory traversal vulnerability in the MT Fire Eagle (com\_mtfireeagle) component 1.2 for Joomla! allows remote attackers to read arbitrary (no CVSS)
- [CVE-2010-1720](https://cve.now/CVE-2010-1720.md): SQL injection vulnerability in the Q-Personel (com\_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2010-1721](https://cve.now/CVE-2010-1721.md): SQL injection vulnerability in the Intellectual Property (aka IProperty or com\_iproperty) component 1.5.3 for Joomla! allows remote attacker (no CVSS)
- [CVE-2010-1722](https://cve.now/CVE-2010-1722.md): Directory traversal vulnerability in the Online Market (com\_market) component 2.x for Joomla! allows remote attackers to read arbitrary file (no CVSS)
- [CVE-2010-1723](https://cve.now/CVE-2010-1723.md): Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com\_drawroot) component 1.1 for Joomla! allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.