# CVEs published 2011-09-15 33 CVEs were published on September 15, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-3321](https://cve.now/CVE-2011-3321.md): Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA… (no CVSS) - [CVE-2011-3211](https://cve.now/CVE-2011-3211.md): The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters… (no CVSS) - [CVE-2011-2671](https://cve.now/CVE-2011-2671.md): Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via… (no CVSS) - [CVE-2011-3322](https://cve.now/CVE-2011-3322.md): Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers… (no CVSS) - [CVE-2011-3393](https://cve.now/CVE-2011-3393.md): Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject… (no CVSS) - [CVE-2011-3394](https://cve.now/CVE-2011-3394.md): SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2011-0653](https://cve.now/CVE-2011-0653.md): Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows… (no CVSS) - [CVE-2011-1353](https://cve.now/CVE-2011-1353.md): Unspecified vulnerability in Adobe Reader 10.x before 10.1.1 on Windows allows local users to gain privileges via unknown vectors. (no CVSS) - [CVE-2011-1890](https://cve.now/CVE-2011-1890.md): Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows… (no CVSS) - [CVE-2011-1891](https://cve.now/CVE-2011-1891.md): Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1… (no CVSS) - [CVE-2011-1892](https://cve.now/CVE-2011-1892.md): Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2… (no CVSS) - [CVE-2011-1893](https://cve.now/CVE-2011-1893.md): Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and… (no CVSS) - [CVE-2011-1980](https://cve.now/CVE-2011-1980.md): Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL… (no CVSS) - [CVE-2011-1982](https://cve.now/CVE-2011-1982.md): Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents… (no CVSS) - [CVE-2011-1984](https://cve.now/CVE-2011-1984.md): WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted… (no CVSS) - [CVE-2011-1986](https://cve.now/CVE-2011-1986.md): Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka… (no CVSS) - [CVE-2011-1987](https://cve.now/CVE-2011-1987.md): Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold… (no CVSS) - [CVE-2011-1988](https://cve.now/CVE-2011-1988.md): Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac… (no CVSS) - [CVE-2011-1989](https://cve.now/CVE-2011-1989.md): Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004… (no CVSS) - [CVE-2011-1990](https://cve.now/CVE-2011-1990.md): Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File… (no CVSS) - [CVE-2011-1991](https://cve.now/CVE-2011-1991.md): Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows… (no CVSS) - [CVE-2011-2431](https://cve.now/CVE-2011-2431.md): Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via… (no CVSS) - [CVE-2011-2432](https://cve.now/CVE-2011-2432.md): Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows… (no CVSS) - [CVE-2011-2433](https://cve.now/CVE-2011-2433.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to… (no CVSS) - [CVE-2011-2434](https://cve.now/CVE-2011-2434.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to… (no CVSS) - [CVE-2011-2435](https://cve.now/CVE-2011-2435.md): Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute… (no CVSS) - [CVE-2011-2436](https://cve.now/CVE-2011-2436.md): Heap-based buffer overflow in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before… (no CVSS) - [CVE-2011-2437](https://cve.now/CVE-2011-2437.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to… (no CVSS) - [CVE-2011-2438](https://cve.now/CVE-2011-2438.md): Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and… (no CVSS) - [CVE-2011-2439](https://cve.now/CVE-2011-2439.md): Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via… (no CVSS) - [CVE-2011-2440](https://cve.now/CVE-2011-2440.md): Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to… (no CVSS) - [CVE-2011-2441](https://cve.now/CVE-2011-2441.md): Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before… (no CVSS) - [CVE-2011-2442](https://cve.now/CVE-2011-2442.md): Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2011-09-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.