# CVEs published 2013-05-10 25 CVEs were published on May 10, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-6552](https://cve.now/CVE-2012-6552.md): Unspecified vulnerability in admin/action.php in phpVMS 2.1.x before 2.1.935 has unknown impact and attack vectors. (no CVSS) - [CVE-2013-3522](https://cve.now/CVE-2013-3522.md): SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authe (no CVSS) - [CVE-2013-3523](https://cve.now/CVE-2013-3523.md): SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related t (no CVSS) - [CVE-2013-3524](https://cve.now/CVE-2013-3524.md): SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execu (no CVSS) - [CVE-2013-3525](https://cve.now/CVE-2013-3525.md): SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2013-3526](https://cve.now/CVE-2013-3526.md): Cross-site scripting (XSS) vulnerability in js/ta\_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress al (no CVSS) - [CVE-2013-3527](https://cve.now/CVE-2013-3527.md): Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the pa (no CVSS) - [CVE-2013-3528](https://cve.now/CVE-2013-3528.md): Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to (no CVSS) - [CVE-2013-3529](https://cve.now/CVE-2013-3529.md): Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote (no CVSS) - [CVE-2013-3530](https://cve.now/CVE-2013-3530.md): SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers to execute arbitrary (no CVSS) - [CVE-2013-3531](https://cve.now/CVE-2013-3531.md): SQL injection vulnerability in meneger.php in RadioCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the playlist\_id par (no CVSS) - [CVE-2013-3532](https://cve.now/CVE-2013-3532.md): SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execut (no CVSS) - [CVE-2013-3533](https://cve.now/CVE-2013-3533.md): Multiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow attackers to execute arbitrary SQL commands via u (no CVSS) - [CVE-2013-0518](https://cve.now/CVE-2013-0518.md): IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 does (no CVSS) - [CVE-2013-0519](https://cve.now/CVE-2013-0519.md): IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 prov (no CVSS) - [CVE-2013-0520](https://cve.now/CVE-2013-0520.md): IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allo (no CVSS) - [CVE-2013-0578](https://cve.now/CVE-2013-0578.md): The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillm (no CVSS) - [CVE-2013-0937](https://cve.now/CVE-2013-0937.md): Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, (no CVSS) - [CVE-2013-0938](https://cve.now/CVE-2013-0938.md): Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before (no CVSS) - [CVE-2013-0939](https://cve.now/CVE-2013-0939.md): EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager bef (no CVSS) - [CVE-2013-0946](https://cve.now/CVE-2013-0946.md): Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2013-1242](https://cve.now/CVE-2013-1242.md): Memory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote attackers to cause a denial of service (memory (no CVSS) - [CVE-2013-2707](https://cve.now/CVE-2013-2707.md): Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the (no CVSS) - [CVE-2013-2977](https://cve.now/CVE-2013-2977.md): Integer overflow in IBM Notes 8.5.x before 8.5.3 FP4 Interim Fix 1 and 9.x before 9.0 Interim Fix 1 on Windows, and 8.5.x before 8.5.3 FP5 a (no CVSS) - [CVE-2013-3254](https://cve.now/CVE-2013-3254.md): Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the WP Photo Album Plus plugin before 5.0.3 for WordPress allows remote at (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-05-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.