# CVEs published 2016-05-10

5 CVEs were published on May 10, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-4553](https://cve.now/CVE-2016-4553.md): client\_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which al (no CVSS)
- [CVE-2016-4554](https://cve.now/CVE-2016-4554.md): mime\_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoni (no CVSS)
- [CVE-2016-4555](https://cve.now/CVE-2016-4555.md): client\_side\_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via craft (no CVSS)
- [CVE-2016-4556](https://cve.now/CVE-2016-4556.md): Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (cra (no CVSS)
- [CVE-2016-4561](https://cve.now/CVE-2016-4561.md): Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inj (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-05-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.