# CVEs published 2011-02-28

7 CVEs were published on February 28, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1104](https://cve.now/CVE-2011-1104.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary us (no CVSS)
- [CVE-2011-1105](https://cve.now/CVE-2011-1105.md): Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via (1) a de (no CVSS)
- [CVE-2011-0925](https://cve.now/CVE-2011-0925.md): The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintend (no CVSS)
- [CVE-2011-1007](https://cve.now/CVE-2011-1007.md): Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers (no CVSS)
- [CVE-2011-1008](https://cve.now/CVE-2011-1008.md): Scrips\_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUse (no CVSS)
- [CVE-2011-1016](https://cve.now/CVE-2011-1016.md): The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows (no CVSS)
- [CVE-2011-1020](https://cve.now/CVE-2011-1020.md): The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.