# CVEs published 2011-04-01

13 CVEs were published on April 1, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-3447](https://cve.now/CVE-2010-3447.md): Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbit (no CVSS)
- [CVE-2010-3693](https://cve.now/CVE-2010-3693.md): Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows (no CVSS)
- [CVE-2010-4235](https://cve.now/CVE-2010-4235.md): Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x befo (no CVSS)
- [CVE-2010-4596](https://cve.now/CVE-2010-4596.md): Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x befo (no CVSS)
- [CVE-2010-4778](https://cve.now/CVE-2010-4778.md): Multiple cross-site scripting (XSS) vulnerabilities in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition bef (no CVSS)
- [CVE-2011-0461](https://cve.now/CVE-2011-0461.md): /etc/init.d/boot.localfs in the aaa\_base package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows l (no CVSS)
- [CVE-2011-0468](https://cve.now/CVE-2011-0468.md): The aaa\_base package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privilege (no CVSS)
- [CVE-2011-0951](https://cve.now/CVE-2011-0951.md): The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote (no CVSS)
- [CVE-2011-1126](https://cve.now/CVE-2011-1126.md): VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow loca (no CVSS)
- [CVE-2011-1546](https://cve.now/CVE-2011-1546.md): Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2011-1555](https://cve.now/CVE-2011-1555.md): SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.3 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2011-1556](https://cve.now/CVE-2011-1556.md): SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute (no CVSS)
- [CVE-2011-1557](https://cve.now/CVE-2011-1557.md): SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.