# CVEs published 2011-05-10

13 CVEs were published on May 10, 2011: 0 critical, 1 high. Days are UTC.

- [CVE-2010-0216](https://cve.now/CVE-2010-0216.md): authenticate\_ad\_setup\_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by readi (no CVSS)
- [CVE-2011-1271](https://cve.now/CVE-2011-1271.md): The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handl (CVSS 7.7)
- [CVE-2011-2076](https://cve.now/CVE-2011-2076.md): MediaCAST 8 and earlier stores passwords in cleartext, which makes it easier for context-dependent attackers to obtain sensitive information (no CVSS)
- [CVE-2011-2077](https://cve.now/CVE-2011-2077.md): The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections (no CVSS)
- [CVE-2011-2078](https://cve.now/CVE-2011-2078.md): Multiple cross-site scripting (XSS) vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow (no CVSS)
- [CVE-2011-2079](https://cve.now/CVE-2011-2079.md): MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP\_RIGHTSOURCE or (2) bdclient\_Inventive cookie to t (no CVSS)
- [CVE-2011-2080](https://cve.now/CVE-2011-2080.md): Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP\_ENLA (no CVSS)
- [CVE-2011-2081](https://cve.now/CVE-2011-2081.md): MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows re (no CVSS)
- [CVE-2011-0904](https://cve.now/CVE-2011-0904.md): The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0 (no CVSS)
- [CVE-2011-0905](https://cve.now/CVE-2011-0905.md): The rfbSendFramebufferUpdate function in server/libvncserver/rfbserver.c in vino-server in Vino 2.x before 2.28.3, 2.32.x before 2.32.2, 3.0 (no CVSS)
- [CVE-2011-1824](https://cve.now/CVE-2011-1824.md): The VEGAOpBitmap::AddLine function in Opera before 10.61 does not properly initialize memory during processing of the SIZE attribute of a SE (no CVSS)
- [CVE-2011-2074](https://cve.now/CVE-2011-2074.md): Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary cod (no CVSS)
- [CVE-2011-2075](https://cve.now/CVE-2011-2075.md): Unspecified vulnerability in Google Chrome 11.0.696.65 on Windows 7 SP1 allows remote attackers to execute arbitrary code via unknown vector (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.