# CVEs published 2010-05-06 9 CVEs were published on May 6, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-1736](https://cve.now/CVE-2010-1736.md): KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS) - [CVE-2010-1737](https://cve.now/CVE-2010-1737.md): PHP remote file inclusion vulnerability in core/includes/gfw\_smarty.php in Gallo 0.1.0, when magic\_quotes\_gpc is disabled, allows remote att (no CVSS) - [CVE-2010-1739](https://cve.now/CVE-2010-1739.md): SQL injection vulnerability in the Newsfeeds (com\_newsfeeds) component for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2010-1740](https://cve.now/CVE-2010-1740.md): SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng paramete (no CVSS) - [CVE-2010-1741](https://cve.now/CVE-2010-1741.md): SQL injection vulnerability in request\_account.php in Billwerx RC 5.2.2 PL2 allows remote attackers to execute arbitrary SQL commands via th (no CVSS) - [CVE-2010-1742](https://cve.now/CVE-2010-1742.md): Cross-site scripting (XSS) vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2010-1743](https://cve.now/CVE-2010-1743.md): SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS) - [CVE-2010-1744](https://cve.now/CVE-2010-1744.md): SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS) - [CVE-2010-1746](https://cve.now/CVE-2010-1746.md): Multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com\_grid) component for Joomla! allow remote attackers to inject arbitr (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-05-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.