# CVEs published 2011-08-24

7 CVEs were published on August 24, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4825](https://cve.now/CVE-2010-4825.md): Cross-site scripting (XSS) vulnerability in magpie\_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote (no CVSS)
- [CVE-2010-4826](https://cve.now/CVE-2010-4826.md): SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M\_N (no CVSS)
- [CVE-2010-4827](https://cve.now/CVE-2010-4827.md): Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2010-4828](https://cve.now/CVE-2010-4828.md): Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inj (no CVSS)
- [CVE-2010-4829](https://cve.now/CVE-2010-4829.md): SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2010-4830](https://cve.now/CVE-2010-4830.md): SQL injection vulnerability in Resumes/TD\_RESUME\_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to e (no CVSS)
- [CVE-2011-3266](https://cve.now/CVE-2011-3266.md): The proto\_tree\_add\_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.