# CVEs published 2010-09-17

19 CVEs were published on September 17, 2010: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3012](https://cve.now/CVE-2010-3012.md): Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2010-3455](https://cve.now/CVE-2010-3455.md): Cross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2010-3456](https://cve.now/CVE-2010-3456.md): Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple Download 1.0 allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2010-3457](https://cve.now/CVE-2010-3457.md): Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2010-3458](https://cve.now/CVE-2010-3458.md): SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbit (no CVSS)
- [CVE-2010-3459](https://cve.now/CVE-2010-3459.md): Cross-site scripting (XSS) vulnerability in the Ajax WebMail interface in AXIGEN Mail Server before 7.4.2 allows remote attackers to inject (no CVSS)
- [CVE-2010-3460](https://cve.now/CVE-2010-3460.md): Directory traversal vulnerability in the HTTP interface in AXIGEN Mail Server 7.4.1 for Windows allows remote attackers to read arbitrary fi (no CVSS)
- [CVE-2010-3461](https://cve.now/CVE-2010-3461.md): SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid (no CVSS)
- [CVE-2010-3462](https://cve.now/CVE-2010-3462.md): Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly other versions allow (no CVSS)
- [CVE-2010-3463](https://cve.now/CVE-2010-3463.md): Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers (no CVSS)
- [CVE-2010-3464](https://cve.now/CVE-2010-3464.md): Cross-site request forgery (CSRF) vulnerability in admin/manager\_users.class.php in SantaFox 2.02, and possibly earlier, allows remote attac (no CVSS)
- [CVE-2010-3465](https://cve.now/CVE-2010-3465.md): Multiple cross-site scripting (XSS) vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-3466](https://cve.now/CVE-2010-3466.md): Cross-site scripting (XSS) vulnerability in index.php in the hosted\_signup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers (no CVSS)
- [CVE-2010-3467](https://cve.now/CVE-2010-3467.md): SQL injection vulnerability in modules/sections/index.php in E-Xoopport Samsara 3.1 and earlier, when the Tutorial module is enabled, allows (no CVSS)
- [CVE-2010-3011](https://cve.now/CVE-2010-3011.md): CRLF injection vulnerability in HP System Management Homepage (SMH) before 6.2 allows remote attackers to inject arbitrary HTTP headers and (no CVSS)
- [CVE-2010-3073](https://cve.now/CVE-2010-3073.md): SSL\_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of ini (no CVSS)
- [CVE-2010-3074](https://cve.now/CVE-2010-3074.md): SSL\_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which al (no CVSS)
- [CVE-2010-3075](https://cve.now/CVE-2010-3075.md): EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for l (no CVSS)
- [CVE-2010-3324](https://cve.now/CVE-2010-3324.md): The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, Shar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2010-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.