# CVEs published 2010-05-26

14 CVEs were published on May 26, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-1513](https://cve.now/CVE-2010-1513.md): Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image (no CVSS)
- [CVE-2010-2025](https://cve.now/CVE-2010-2025.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable mode (no CVSS)
- [CVE-2010-2026](https://cve.now/CVE-2010-2026.md): The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to b (no CVSS)
- [CVE-2010-2082](https://cve.now/CVE-2010-2082.md): The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 has a default administrative (no CVSS)
- [CVE-2010-2083](https://cve.now/CVE-2010-2083.md): Microsoft Dynamics GP has a default value of ACCESS for the system password, which might make it easier for remote authenticated users to by (no CVSS)
- [CVE-2009-4873](https://cve.now/CVE-2009-4873.md): Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2009-4874](https://cve.now/CVE-2009-4874.md): TalkBack 2.3.14 does not properly restrict access to the edit comment feature (comments.php), which allows remote attackers to modify commen (no CVSS)
- [CVE-2009-4875](https://cve.now/CVE-2009-4875.md): FCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed request parameter that contains "ctr (no CVSS)
- [CVE-2009-4876](https://cve.now/CVE-2009-4876.md): admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter. (no CVSS)
- [CVE-2009-4877](https://cve.now/CVE-2009-4877.md): Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of us (no CVSS)
- [CVE-2009-4878](https://cve.now/CVE-2009-4878.md): Unspecified vulnerability in the Administration Console in Novell Access Manager before 3.1 SP1 allows attackers to access system files via (no CVSS)
- [CVE-2009-4879](https://cve.now/CVE-2009-4879.md): The Identity Server in Novell Access Manager before 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X (no CVSS)
- [CVE-2010-1639](https://cve.now/CVE-2010-1639.md): The cli\_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed (no CVSS)
- [CVE-2010-1640](https://cve.now/CVE-2010-1640.md): Off-by-one error in the parseicon function in libclamav/pe\_icons.c in ClamAV 0.96 allows remote attackers to cause a denial of service (cras (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.