# CVEs published 2012-08-17 20 CVEs were published on August 17, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-0744](https://cve.now/CVE-2012-0744.md): IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information… (no CVSS) - [CVE-2012-2164](https://cve.now/CVE-2012-2164.md): The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended… (no CVSS) - [CVE-2012-2165](https://cve.now/CVE-2012-2165.md): IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote… (no CVSS) - [CVE-2012-2168](https://cve.now/CVE-2012-2168.md): IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace… (no CVSS) - [CVE-2012-2169](https://cve.now/CVE-2012-2169.md): Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before… (no CVSS) - [CVE-2012-2205](https://cve.now/CVE-2012-2205.md): Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote… (no CVSS) - [CVE-2012-3296](https://cve.now/CVE-2012-3296.md): Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before… (no CVSS) - [CVE-2012-4006](https://cve.now/CVE-2012-4006.md): The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura… (no CVSS) - [CVE-2012-4007](https://cve.now/CVE-2012-4007.md): The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a… (no CVSS) - [CVE-2012-2206](https://cve.now/CVE-2012-2206.md): The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of… (no CVSS) - [CVE-2012-3294](https://cve.now/CVE-2012-3294.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4… (no CVSS) - [CVE-2012-3308](https://cve.now/CVE-2012-3308.md): Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2009-5026](https://cve.now/CVE-2009-5026.md): The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which… (no CVSS) - [CVE-2012-1585](https://cve.now/CVE-2012-1585.md): OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk… (no CVSS, nova) - [CVE-2012-1597](https://cve.now/CVE-2012-1597.md): Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5… (no CVSS) - [CVE-2012-1908](https://cve.now/CVE-2012-1908.md): Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2012-2102](https://cve.now/CVE-2012-2102.md): MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and… (no CVSS) - [CVE-2012-2749](https://cve.now/CVE-2012-2749.md): MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via… (no CVSS) - [CVE-2012-2750](https://cve.now/CVE-2012-2750.md): Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. (no CVSS) - [CVE-2012-3381](https://cve.now/CVE-2012-3381.md): sfcb in sblim-sfcb places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2012-08-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.