# CVEs published 2010-09-13

8 CVEs were published on September 13, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-2366](https://cve.now/CVE-2010-2366.md): Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote (no CVSS)
- [CVE-2010-2952](https://cve.now/CVE-2010-2952.md): Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does (no CVSS)
- [CVE-2010-3008](https://cve.now/CVE-2010-3008.md): Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4 (no CVSS)
- [CVE-2010-3202](https://cve.now/CVE-2010-3202.md): Cross-site scripting (XSS) vulnerability in Flock Browser 3.0.0.3989 allows remote attackers to inject arbitrary web script or HTML via a cr (no CVSS)
- [CVE-2010-3317](https://cve.now/CVE-2010-3317.md): Cross-site scripting (XSS) vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2010-3318](https://cve.now/CVE-2010-3318.md): IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive (no CVSS)
- [CVE-2010-3319](https://cve.now/CVE-2010-3319.md): IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sens (no CVSS)
- [CVE-2010-3320](https://cve.now/CVE-2010-3320.md): Open redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to redirect users to arbitrar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.