# CVEs published 2012-04-18

14 CVEs were published on April 18, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5088](https://cve.now/CVE-2011-5088.md): The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user… (no CVSS)
- [CVE-2011-5089](https://cve.now/CVE-2011-5089.md): Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2… (no CVSS)
- [CVE-2012-0253](https://cve.now/CVE-2012-0253.md): Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject… (no CVSS)
- [CVE-2011-4871](https://cve.now/CVE-2011-4871.md): Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet… (no CVSS)
- [CVE-2011-5086](https://cve.now/CVE-2011-5086.md): https50.ocx in IP\*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which… (no CVSS)
- [CVE-2011-5087](https://cve.now/CVE-2011-5087.md): Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as… (no CVSS)
- [CVE-2012-0135](https://cve.now/CVE-2012-0135.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause a denial of service… (no CVSS)
- [CVE-2012-0278](https://cve.now/CVE-2012-0278.md): Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via… (no CVSS)
- [CVE-2012-0883](https://cve.now/CVE-2012-0883.md): envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows… (no CVSS)
- [CVE-2012-1799](https://cve.now/CVE-2012-1799.md): The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not… (no CVSS)
- [CVE-2012-1800](https://cve.now/CVE-2012-1800.md): Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612… (no CVSS)
- [CVE-2012-1801](https://cve.now/CVE-2012-1801.md): Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC… (no CVSS)
- [CVE-2012-1802](https://cve.now/CVE-2012-1802.md): Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before… (no CVSS)
- [CVE-2012-1993](https://cve.now/CVE-2012-1993.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain sensitive… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.