# CVEs published 2012-07-05 20 CVEs were published on July 5, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-2018](https://cve.now/CVE-2012-2018.md): Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x allows remote attackers to inject… (no CVSS) - [CVE-2012-3585](https://cve.now/CVE-2012-3585.md): Heap-based buffer overflow in jpeg\_ls.dll in the Jpeg\_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows… (no CVSS) - [CVE-2012-0300](https://cve.now/CVE-2012-0300.md): Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which… (no CVSS) - [CVE-2012-0301](https://cve.now/CVE-2012-0301.md): Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions… (no CVSS) - [CVE-2012-0302](https://cve.now/CVE-2012-0302.md): Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject… (no CVSS) - [CVE-2012-0303](https://cve.now/CVE-2012-0303.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote… (no CVSS) - [CVE-2012-2640](https://cve.now/CVE-2012-2640.md): The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card… (no CVSS) - [CVE-2012-2641](https://cve.now/CVE-2012-2641.md): Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by… (no CVSS) - [CVE-2012-0410](https://cve.now/CVE-2012-0410.md): Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the… (no CVSS) - [CVE-2012-2143](https://cve.now/CVE-2012-2143.md): The crypt\_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not… (no CVSS) - [CVE-2012-2281](https://cve.now/CVE-2012-2281.md): EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout… (no CVSS) - [CVE-2012-1830](https://cve.now/CVE-2012-1830.md): Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port… (no CVSS) - [CVE-2012-1831](https://cve.now/CVE-2012-1831.md): Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port… (no CVSS) - [CVE-2012-1832](https://cve.now/CVE-2012-1832.md): WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted… (no CVSS) - [CVE-2012-2515](https://cve.now/CVE-2012-2515.md): Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the… (no CVSS) - [CVE-2012-2516](https://cve.now/CVE-2012-2516.md): An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy… (no CVSS) - [CVE-2012-2559](https://cve.now/CVE-2012-2559.md): WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a… (no CVSS) - [CVE-2012-2560](https://cve.now/CVE-2012-2560.md): Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request… (no CVSS) - [CVE-2012-3007](https://cve.now/CVE-2012-3007.md): Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as… (no CVSS) - [CVE-2012-3847](https://cve.now/CVE-2012-3847.md): slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2012-07-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.