# CVEs published 2010-05-14

20 CVEs were published on May 14, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-0601](https://cve.now/CVE-2010-0601.md): The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-0602](https://cve.now/CVE-2010-0602.md): The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S11 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-0603](https://cve.now/CVE-2010-0603.md): The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2010-0604](https://cve.now/CVE-2010-0604.md): Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.7(3)S10 allows remote attackers (no CVSS)
- [CVE-2010-1556](https://cve.now/CVE-2010-1556.md): Unspecified vulnerability in HP Systems Insight Manager (SIM) 5.3, 5.3 Update 1, and 6.0 allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2010-1557](https://cve.now/CVE-2010-1557.md): Multiple cross-site scripting (XSS) vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbit (no CVSS)
- [CVE-2010-1561](https://cve.now/CVE-2010-1561.md): The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9.7(3)P before 9.7(3)P11 allows remote at (no CVSS)
- [CVE-2010-1562](https://cve.now/CVE-2010-1562.md): The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote atta (no CVSS)
- [CVE-2010-1563](https://cve.now/CVE-2010-1563.md): The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote atta (no CVSS)
- [CVE-2010-1565](https://cve.now/CVE-2010-1565.md): Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P befor (no CVSS)
- [CVE-2010-1567](https://cve.now/CVE-2010-1567.md): The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.8(1)S5 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2010-1568](https://cve.now/CVE-2010-1568.md): The Send Secure functionality in the Cisco IronPort Desktop Flag Plug-in for Outlook before 6.5.0-006 does not properly handle simultaneousl (no CVSS)
- [CVE-2010-1940](https://cve.now/CVE-2010-1940.md): Apple Safari 4.0.5 on Windows sends the "Authorization: Basic" header appropriate for one web site to a different web site named in a Locati (no CVSS)
- [CVE-2009-3678](https://cve.now/CVE-2009-3678.md): Integer overflow in cdd.dll in the Canonical Display Driver (CDD) in Microsoft Windows Server 2008 R2 and Windows 7 on 64-bit platforms, whe (no CVSS)
- [CVE-2010-0475](https://cve.now/CVE-2010-0475.md): Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 al (no CVSS)
- [CVE-2010-1509](https://cve.now/CVE-2010-1509.md): IrfanView before 4.27 does not properly handle an unspecified integer variable during processing of PSD images, which allows remote attacker (no CVSS)
- [CVE-2010-1510](https://cve.now/CVE-2010-1510.md): Heap-based buffer overflow in IrfanView before 4.27 allows remote attackers to cause a denial of service (application crash) or possibly exe (no CVSS)
- [CVE-2010-1558](https://cve.now/CVE-2010-1558.md): Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local users to bypass intended (no CVSS)
- [CVE-2010-1621](https://cve.now/CVE-2010-1621.md): The mysql\_uninstall\_plugin function in sql/sql\_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, (no CVSS)
- [CVE-2010-1624](https://cve.now/CVE-2010-1624.md): The msn\_emoticon\_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.