# CVEs published 2010-05-12

23 CVEs were published on May 12, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1920](https://cve.now/CVE-2010-1920.md): Directory traversal vulnerability in scr/soustab.php in OpenMairie openAnnuaire 2.00, when register\_globals is enabled, allows remote attack (no CVSS)
- [CVE-2010-1921](https://cve.now/CVE-2010-1921.md): Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register\_globals is enabled, allow remote attackers (no CVSS)
- [CVE-2010-1922](https://cve.now/CVE-2010-1922.md): Multiple PHP remote file inclusion vulnerabilities in 29o3 CMS 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the Lib (no CVSS)
- [CVE-2010-1923](https://cve.now/CVE-2010-1923.md): SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execu (no CVSS)
- [CVE-2010-1924](https://cve.now/CVE-2010-1924.md): SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-1925](https://cve.now/CVE-2010-1925.md): SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2010-1926](https://cve.now/CVE-2010-1926.md): Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register\_globals is enabled, allows (no CVSS)
- [CVE-2010-1927](https://cve.now/CVE-2010-1927.md): Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register\_globals is enabled, allow re (no CVSS)
- [CVE-2010-1928](https://cve.now/CVE-2010-1928.md): Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register\_globals is enabled, allows remote attack (no CVSS)
- [CVE-2010-1934](https://cve.now/CVE-2010-1934.md): Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register\_globals is enabled, allow remote attackers (no CVSS)
- [CVE-2010-1935](https://cve.now/CVE-2010-1935.md): Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register\_globals is enabled, allows remote attacker (no CVSS)
- [CVE-2010-1936](https://cve.now/CVE-2010-1936.md): Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register\_globals is enabled, allows remote atta (no CVSS)
- [CVE-2010-1482](https://cve.now/CVE-2010-1482.md): Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote at (no CVSS)
- [CVE-2010-0815](https://cve.now/CVE-2010-0815.md): VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA (no CVSS)
- [CVE-2010-0816](https://cve.now/CVE-2010-0816.md): Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vi (no CVSS)
- [CVE-2010-1457](https://cve.now/CVE-2010-1457.md): Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 allows local users to read arbitrary files via a (1) -c or (2) -a option, which print (no CVSS)
- [CVE-2010-1620](https://cve.now/CVE-2010-1620.md): Integer overflow in the load\_iface function in Tools/gdomap.c in gdomap in GNUstep Base before 1.20.0 might allow context-dependent attacker (no CVSS)
- [CVE-2010-1869](https://cve.now/CVE-2010-1869.md): Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code (no CVSS)
- [CVE-2010-1914](https://cve.now/CVE-2010-1914.md): The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interr (no CVSS)
- [CVE-2010-1915](https://cve.now/CVE-2010-1915.md): The preg\_quote function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information ( (no CVSS)
- [CVE-2010-1916](https://cve.now/CVE-2010-1916.md): The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in Serendipity 1.5.2 and earlier, allows remote a (no CVSS)
- [CVE-2010-1917](https://cve.now/CVE-2010-1917.md): Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to cause a denial of serv (no CVSS)
- [CVE-2010-1918](https://cve.now/CVE-2010-1918.md): SQL injection vulnerability in ask\_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the ch (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.