# CVEs published 2013-03-27

37 CVEs were published on March 27, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1887](https://cve.now/CVE-2013-1887.md): Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users… (no CVSS)
- [CVE-2013-0181](https://cve.now/CVE-2013-0181.md): Cross-site scripting (XSS) vulnerability in Views in the Search API (search\_api) module 7.x-1.x before 7.x-1.4 for Drupal, when using… (no CVSS)
- [CVE-2013-0182](https://cve.now/CVE-2013-0182.md): The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read… (no CVSS)
- [CVE-2013-0257](https://cve.now/CVE-2013-0257.md): The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read… (no CVSS)
- [CVE-2013-0258](https://cve.now/CVE-2013-0258.md): The Google Authenticator login (ga\_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote… (no CVSS)
- [CVE-2013-0259](https://cve.now/CVE-2013-0259.md): Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with… (no CVSS)
- [CVE-2013-0260](https://cve.now/CVE-2013-0260.md): Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credentials via unknown… (no CVSS)
- [CVE-2013-0316](https://cve.now/CVE-2013-0316.md): The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space consumption) via a… (no CVSS)
- [CVE-2013-0317](https://cve.now/CVE-2013-0317.md): Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og\_manager\_change) module 7.x-2.x before 7.x-2.1 for… (no CVSS)
- [CVE-2013-0318](https://cve.now/CVE-2013-0318.md): The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended… (no CVSS)
- [CVE-2013-0319](https://cve.now/CVE-2013-0319.md): Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows… (no CVSS)
- [CVE-2013-0320](https://cve.now/CVE-2013-0320.md): Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy\_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x… (no CVSS)
- [CVE-2013-0321](https://cve.now/CVE-2013-0321.md): Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc\_views) module 6.x before 6.x-3.3 for Drupal allows remote… (no CVSS)
- [CVE-2013-0322](https://cve.now/CVE-2013-0322.md): Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to… (no CVSS)
- [CVE-2013-0323](https://cve.now/CVE-2013-0323.md): Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows… (no CVSS)
- [CVE-2013-0324](https://cve.now/CVE-2013-0324.md): Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal… (no CVSS)
- [CVE-2013-0325](https://cve.now/CVE-2013-0325.md): Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for… (no CVSS)
- [CVE-2013-1778](https://cve.now/CVE-2013-1778.md): Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with… (no CVSS)
- [CVE-2013-1779](https://cve.now/CVE-2013-1779.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated… (no CVSS)
- [CVE-2013-1780](https://cve.now/CVE-2013-1780.md): Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users… (no CVSS)
- [CVE-2013-1781](https://cve.now/CVE-2013-1781.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote… (no CVSS)
- [CVE-2013-1782](https://cve.now/CVE-2013-1782.md): Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users… (no CVSS)
- [CVE-2013-1783](https://cve.now/CVE-2013-1783.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal… (no CVSS)
- [CVE-2013-1784](https://cve.now/CVE-2013-1784.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows remote authenticated… (no CVSS)
- [CVE-2013-1785](https://cve.now/CVE-2013-1785.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote… (no CVSS)
- [CVE-2013-1786](https://cve.now/CVE-2013-1786.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows remote authenticated… (no CVSS)
- [CVE-2013-1787](https://cve.now/CVE-2013-1787.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote… (no CVSS)
- [CVE-2013-1859](https://cve.now/CVE-2013-1859.md): The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, which allows remote… (no CVSS)
- [CVE-2013-2715](https://cve.now/CVE-2013-2715.md): Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search\_api) module 7.x-1.x before 7.x-1.4 for Drupal allows… (no CVSS)
- [CVE-2013-0718](https://cve.now/CVE-2013-0718.md): The Simeji application 4.8.1 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain… (no CVSS)
- [CVE-2013-0719](https://cve.now/CVE-2013-0719.md): The ArtIME Japanese Input application 1.1.2 and earlier for Android uses weak permissions for unspecified files, which allows attackers to… (no CVSS)
- [CVE-2013-0720](https://cve.now/CVE-2013-0720.md): The COBIME application before 0.9.4 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive… (no CVSS)
- [CVE-2013-2300](https://cve.now/CVE-2013-2300.md): The FlickWnn (aka OpenWnn/Flick support) application 2.02 and earlier for Android uses weak permissions for unspecified files, which… (no CVSS)
- [CVE-2013-0486](https://cve.now/CVE-2013-0486.md): Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon… (no CVSS)
- [CVE-2013-0487](https://cve.now/CVE-2013-0487.md): The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of… (no CVSS)
- [CVE-2013-0488](https://cve.now/CVE-2013-0488.md): Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to… (no CVSS)
- [CVE-2013-0489](https://cve.now/CVE-2013-0489.md): Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-03-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.