# CVEs published 2010-05-18

20 CVEs were published on May 18, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1949](https://cve.now/CVE-2010-1949.md): SQL injection vulnerability in the Online News Paper Manager (com\_jnewspaper) component 1.0 for Joomla! allows remote attackers to execute a (no CVSS)
- [CVE-2010-1950](https://cve.now/CVE-2010-1950.md): SQL injection vulnerability in the Online News Paper Manager (com\_jnewspaper) component 1.0 for Joomla!, when magic\_quotes\_gpc is disabled, (no CVSS)
- [CVE-2010-1951](https://cve.now/CVE-2010-1951.md): Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory (no CVSS)
- [CVE-2010-1952](https://cve.now/CVE-2010-1952.md): Directory traversal vulnerability in the BeeHeard (com\_beeheard) and BeeHeard Lite (com\_beeheardlite) component 1.0 for Joomla! allows remot (no CVSS)
- [CVE-2010-1953](https://cve.now/CVE-2010-1953.md): Directory traversal vulnerability in the iNetLanka Multiple Map (com\_multimap) component 1.0 for Joomla! allows remote attackers to read arb (no CVSS)
- [CVE-2010-1954](https://cve.now/CVE-2010-1954.md): Directory traversal vulnerability in the iNetLanka Multiple root (com\_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers t (no CVSS)
- [CVE-2010-1955](https://cve.now/CVE-2010-1955.md): Directory traversal vulnerability in the Deluxe Blog Factory (com\_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read a (no CVSS)
- [CVE-2010-1956](https://cve.now/CVE-2010-1956.md): Directory traversal vulnerability in the Gadget Factory (com\_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to (no CVSS)
- [CVE-2010-1957](https://cve.now/CVE-2010-1957.md): Directory traversal vulnerability in the Love Factory (com\_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrar (no CVSS)
- [CVE-2010-1944](https://cve.now/CVE-2010-1944.md): Multiple PHP remote file inclusion vulnerabilities in openMairie openCimetiere 2.01, when register\_globals is enabled, allow remote attacker (no CVSS)
- [CVE-2010-1945](https://cve.now/CVE-2010-1945.md): Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register\_globals is enabled, allow remote attackers (no CVSS)
- [CVE-2010-1946](https://cve.now/CVE-2010-1946.md): Multiple PHP remote file inclusion vulnerabilities in openMairie Openregistrecil 1.02, when register\_globals is enabled, allow remote attack (no CVSS)
- [CVE-2010-1947](https://cve.now/CVE-2010-1947.md): Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when register\_globals is enabled, allows remote att (no CVSS)
- [CVE-2010-1948](https://cve.now/CVE-2010-1948.md): Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register\_globals is enabled, allows remote attacke (no CVSS)
- [CVE-2010-1941](https://cve.now/CVE-2010-1941.md): Unspecified vulnerability in NEC WebSAM DeploymentManager 5.13 and earlier, as used in SigmaSystemCenter 2.1 Update2 and earlier, BladeSyste (no CVSS)
- [CVE-2010-1942](https://cve.now/CVE-2010-1942.md): Unspecified vulnerability in the Servlet service in Fujitsu Limited Interstage Application Server 3.0 through 7.0, as used in Interstage App (no CVSS)
- [CVE-2010-1943](https://cve.now/CVE-2010-1943.md): Unspecified vulnerability in NEC CapsSuite Small Edition PatchMeister 2.0 Update2 and earlier allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2010-0403](https://cve.now/CVE-2010-0403.md): Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbi (no CVSS)
- [CVE-2010-0404](https://cve.now/CVE-2010-0404.md): Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2010-1584](https://cve.now/CVE-2010-1584.md): Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Adminis (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.