# CVEs published 2010-05-19 20 CVEs were published on May 19, 2010: 0 critical, 0 high. Days are UTC. - [CVE-2010-1627](https://cve.now/CVE-2010-1627.md): feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended acc (no CVSS) - [CVE-2010-1628](https://cve.now/CVE-2010-1628.md): Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file conta (no CVSS) - [CVE-2010-1629](https://cve.now/CVE-2010-1629.md): Cross-site scripting (XSS) vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an inval (no CVSS) - [CVE-2010-1630](https://cve.now/CVE-2010-1630.md): Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in c (no CVSS, phpbb/phpbb) - [CVE-2010-1985](https://cve.now/CVE-2010-1985.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote (no CVSS) - [CVE-2010-1984](https://cve.now/CVE-2010-1984.md): Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and 6.x before 6.x-1.1 for Drupal allows remot (no CVSS) - [CVE-2010-1976](https://cve.now/CVE-2010-1976.md): Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for Drupal allows remote authenticated users, (no CVSS) - [CVE-2010-1977](https://cve.now/CVE-2010-1977.md): Directory traversal vulnerability in the J!WHMCS Integrator (com\_jwhmcs) component 1.5.0 for Joomla! allows remote attackers to read arbitra (no CVSS) - [CVE-2010-1978](https://cve.now/CVE-2010-1978.md): PHP remote file inclusion vulnerability in default\_theme.php in FreePHPBlogSoftware 1.0, when register\_globals is enabled, allows remote att (no CVSS) - [CVE-2010-1979](https://cve.now/CVE-2010-1979.md): Directory traversal vulnerability in the Affiliate Datafeeds (com\_datafeeds) component build 880 for Joomla! allows remote attackers to read (no CVSS) - [CVE-2010-1980](https://cve.now/CVE-2010-1980.md): Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com\_joomlaflickr) component 1.0.3 for Joomla! allows remote atta (no CVSS) - [CVE-2010-1981](https://cve.now/CVE-2010-1981.md): Directory traversal vulnerability in the Fabrik (com\_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a (no CVSS) - [CVE-2010-1982](https://cve.now/CVE-2010-1982.md): Directory traversal vulnerability in the JA Voice (com\_javoice) component 2.0 for Joomla! allows remote attackers to read arbitrary files vi (no CVSS) - [CVE-2010-1983](https://cve.now/CVE-2010-1983.md): Directory traversal vulnerability in the redTWITTER (com\_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to (no CVSS) - [CVE-2010-1169](https://cve.now/CVE-2010-1169.md): PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta bef (no CVSS) - [CVE-2010-1170](https://cve.now/CVE-2010-1170.md): The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 b (no CVSS) - [CVE-2010-1321](https://cve.now/CVE-2010-1321.md): The kg\_accept\_krb5 function in krb5/accept\_sec\_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1. (no CVSS) - [CVE-2010-1447](https://cve.now/CVE-2010-1447.md): The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 (no CVSS) - [CVE-2010-1454](https://cve.now/CVE-2010-1454.md): com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, a (no CVSS) - [CVE-2010-1975](https://cve.now/CVE-2010-1975.md): PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not prop (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-05-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.