# CVEs published 2013-05-08

18 CVEs were published on May 8, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3497](https://cve.now/CVE-2013-3497.md): Juniper Junos Space before 12.3P2.8, as used on the JA1500 appliance and in other contexts, includes a cleartext password in a… (no CVSS)
- [CVE-2013-1241](https://cve.now/CVE-2013-1241.md): The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated… (no CVSS)
- [CVE-2013-3499](https://cve.now/CVE-2013-3499.md): GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to… (no CVSS)
- [CVE-2013-3500](https://cve.now/CVE-2013-3500.md): The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under… (no CVSS)
- [CVE-2013-3501](https://cve.now/CVE-2013-3501.md): Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2013-3502](https://cve.now/CVE-2013-3502.md): monarch\_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary… (no CVSS)
- [CVE-2013-3503](https://cve.now/CVE-2013-3503.md): The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated… (no CVSS)
- [CVE-2013-3504](https://cve.now/CVE-2013-3504.md): Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote… (no CVSS)
- [CVE-2013-3505](https://cve.now/CVE-2013-3505.md): The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions… (no CVSS)
- [CVE-2013-3506](https://cve.now/CVE-2013-3506.md): cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML… (no CVSS)
- [CVE-2013-3507](https://cve.now/CVE-2013-3507.md): The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct… (no CVSS)
- [CVE-2013-3508](https://cve.now/CVE-2013-3508.md): html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote… (no CVSS)
- [CVE-2013-3509](https://cve.now/CVE-2013-3509.md): html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary… (no CVSS)
- [CVE-2013-3510](https://cve.now/CVE-2013-3510.md): Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL… (no CVSS)
- [CVE-2013-3511](https://cve.now/CVE-2013-3511.md): Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to… (no CVSS)
- [CVE-2013-3512](https://cve.now/CVE-2013-3512.md): The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote… (no CVSS)
- [CVE-2013-3513](https://cve.now/CVE-2013-3513.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote… (no CVSS)
- [CVE-2013-3498](https://cve.now/CVE-2013-3498.md): Cross-site scripting (XSS) vulnerability in Juniper SmartPass WLAN Security Management before 7.7 MR3 and 8.0 before MR2 allows remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.