# CVEs published 2012-02-21

37 CVEs were published on February 21, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1914](https://cve.now/CVE-2011-1914.md): Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU… (no CVSS)
- [CVE-2011-4521](https://cve.now/CVE-2011-4521.md): SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2011-4522](https://cve.now/CVE-2011-4522.md): Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject… (no CVSS)
- [CVE-2011-4523](https://cve.now/CVE-2011-4523.md): Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject… (no CVSS)
- [CVE-2011-4524](https://cve.now/CVE-2011-4524.md): Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in… (no CVSS)
- [CVE-2011-4525](https://cve.now/CVE-2011-4525.md): Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a… (no CVSS)
- [CVE-2011-4526](https://cve.now/CVE-2011-4526.md): Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2011-4890](https://cve.now/CVE-2011-4890.md): The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash)… (no CVSS)
- [CVE-2012-0200](https://cve.now/CVE-2012-0200.md): The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users… (no CVSS)
- [CVE-2012-0233](https://cve.now/CVE-2012-0233.md): Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2012-0234](https://cve.now/CVE-2012-0234.md): SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a… (no CVSS)
- [CVE-2012-0235](https://cve.now/CVE-2012-0235.md): Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the… (no CVSS)
- [CVE-2012-0236](https://cve.now/CVE-2012-0236.md): Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. (no CVSS)
- [CVE-2012-0237](https://cve.now/CVE-2012-0237.md): Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing… (no CVSS)
- [CVE-2012-0238](https://cve.now/CVE-2012-0238.md): Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via… (no CVSS)
- [CVE-2012-0239](https://cve.now/CVE-2012-0239.md): uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to… (no CVSS)
- [CVE-2012-0240](https://cve.now/CVE-2012-0240.md): GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to… (no CVSS)
- [CVE-2012-0241](https://cve.now/CVE-2012-0241.md): Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream… (no CVSS)
- [CVE-2012-0242](https://cve.now/CVE-2012-0242.md): Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string… (no CVSS)
- [CVE-2012-0243](https://cve.now/CVE-2012-0243.md): Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute… (no CVSS)
- [CVE-2012-0244](https://cve.now/CVE-2012-0244.md): Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2012-1234](https://cve.now/CVE-2012-1234.md): SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a… (no CVSS)
- [CVE-2012-1235](https://cve.now/CVE-2012-1235.md): Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the… (no CVSS)
- [CVE-2012-0865](https://cve.now/CVE-2012-0865.md): Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and… (no CVSS)
- [CVE-2012-0993](https://cve.now/CVE-2012-0993.md): Eval injection vulnerability in zp-core/zp-extensions/viewer\_size\_image.php in ZENphoto 1.4.2, when the viewer\_size\_image plugin is… (no CVSS)
- [CVE-2012-0994](https://cve.now/CVE-2012-0994.md): SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated… (no CVSS)
- [CVE-2012-0995](https://cve.now/CVE-2012-0995.md): Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2012-1218](https://cve.now/CVE-2012-1218.md): Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified… (no CVSS)
- [CVE-2012-1219](https://cve.now/CVE-2012-1219.md): Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2012-1220](https://cve.now/CVE-2012-1220.md): Cross-site request forgery (CSRF) vulnerability in modules/config/admin\_utente.php in GAzie 5.20 and earlier allows remote attackers to… (no CVSS)
- [CVE-2012-1221](https://cve.now/CVE-2012-1221.md): Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read… (no CVSS)
- [CVE-2012-1222](https://cve.now/CVE-2012-1222.md): Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a… (no CVSS)
- [CVE-2012-1223](https://cve.now/CVE-2012-1223.md): RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain… (no CVSS)
- [CVE-2012-1224](https://cve.now/CVE-2012-1224.md): Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2012-1225](https://cve.now/CVE-2012-1225.md): Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL… (no CVSS)
- [CVE-2012-1226](https://cve.now/CVE-2012-1226.md): Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly… (no CVSS)
- [CVE-2012-1227](https://cve.now/CVE-2012-1227.md): Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.