# CVEs published 2010-05-21

11 CVEs were published on May 21, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1546](https://cve.now/CVE-2010-1546.md): Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupa (no CVSS)
- [CVE-2010-1547](https://cve.now/CVE-2010-1547.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow r (no CVSS)
- [CVE-2010-1548](https://cve.now/CVE-2010-1548.md): The auto-complete functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal does not follow access restriction (no CVSS)
- [CVE-2010-2010](https://cve.now/CVE-2010-2010.md): Multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote a (no CVSS)
- [CVE-2010-2011](https://cve.now/CVE-2010-2011.md): Microsoft Dynamics GP uses a substitution cipher to encrypt the system password field and unspecified other fields, which makes it easier fo (no CVSS)
- [CVE-2010-0538](https://cve.now/CVE-2010-0538.md): Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not properly handle mediaLibImage objects, which (no CVSS)
- [CVE-2010-0539](https://cve.now/CVE-2010-0539.md): Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 bef (no CVSS)
- [CVE-2010-1436](https://cve.now/CVE-2010-1436.md): gfs2 in the Linux kernel 2.6.18, and possibly other versions, does not properly handle when the gfs2\_quota struct occupies two separate page (no CVSS)
- [CVE-2010-1446](https://cve.now/CVE-2010-1446.md): arch/powerpc/mm/fsl\_booke\_mmu.c in KGDB in the Linux kernel 2.6.30 and other versions before 2.6.33, when running on PowerPC, does not prope (no CVSS)
- [CVE-2010-1626](https://cve.now/CVE-2010-1626.md): MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction (no CVSS)
- [CVE-2010-2009](https://cve.now/CVE-2010-2009.md): Stack-based buffer overflow in the media library in BS.Global BS.Player 2.51 build 1022, 2.41 build 1003, and possibly other versions allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.