# CVEs published 2010-05-28

16 CVEs were published on May 28, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2111](https://cve.now/CVE-2010-2111.md): Cross-site request forgery (CSRF) vulnerability in user/user-set.do in Pacific Timesheet 6.74 build 363 allows remote attackers to hijack th (no CVSS)
- [CVE-2010-2112](https://cve.now/CVE-2010-2112.md): Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files vi (no CVSS)
- [CVE-2010-2113](https://cve.now/CVE-2010-2113.md): Multiple cross-site request forgery (CSRF) vulnerabilities in The Uniform Server 5.6.5 allow remote attackers to hijack the authentication o (no CVSS)
- [CVE-2010-2114](https://cve.now/CVE-2010-2114.md): Cross-site request forgery (CSRF) vulnerability in pbx/gate in Brekeke PBX 2.4.4.8 allows remote attackers to hijack the authentication of u (no CVSS)
- [CVE-2010-2115](https://cve.now/CVE-2010-2115.md): SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. (no CVSS)
- [CVE-2010-2116](https://cve.now/CVE-2010-2116.md): The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Wr (no CVSS)
- [CVE-2010-1919](https://cve.now/CVE-2010-1919.md): Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service (gsan service hang) by (no CVSS)
- [CVE-2010-1938](https://cve.now/CVE-2010-1938.md): Off-by-one error in the \_\_opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-P (no CVSS)
- [CVE-2010-2020](https://cve.now/CVE-2010-2020.md): sys/nfsclient/nfs\_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not va (no CVSS)
- [CVE-2010-2022](https://cve.now/CVE-2010-2022.md): jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the curren (no CVSS)
- [CVE-2010-2105](https://cve.now/CVE-2010-2105.md): Google Chrome before 5.0.375.55 does not properly follow the Safe Browsing specification's requirements for canonicalization of URLs, which (no CVSS)
- [CVE-2010-2106](https://cve.now/CVE-2010-2106.md): Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload (no CVSS)
- [CVE-2010-2107](https://cve.now/CVE-2010-2107.md): Unspecified vulnerability in Google Chrome before 5.0.375.55 allows attackers to cause a denial of service (memory error) or possibly have u (no CVSS)
- [CVE-2010-2108](https://cve.now/CVE-2010-2108.md): Unspecified vulnerability in Google Chrome before 5.0.375.55 allows remote attackers to bypass the whitelist-mode plugin blocker via unknown (no CVSS)
- [CVE-2010-2109](https://cve.now/CVE-2010-2109.md): Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service (memory erro (no CVSS)
- [CVE-2010-2110](https://cve.now/CVE-2010-2110.md): Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, which has unspecified impact and remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-05-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.