# CVEs published 2013-09-06

17 CVEs were published on September 6, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5990](https://cve.now/CVE-2012-5990.md): Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless… (no CVSS)
- [CVE-2013-1115](https://cve.now/CVE-2013-1115.md): Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28… (no CVSS)
- [CVE-2013-1116](https://cve.now/CVE-2013-1116.md): Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28… (no CVSS)
- [CVE-2013-1117](https://cve.now/CVE-2013-1117.md): Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before… (no CVSS)
- [CVE-2013-1118](https://cve.now/CVE-2013-1118.md): Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28… (no CVSS)
- [CVE-2013-1119](https://cve.now/CVE-2013-1119.md): Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28 before T28.8… (no CVSS)
- [CVE-2013-1228](https://cve.now/CVE-2013-1228.md): Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… (no CVSS)
- [CVE-2013-3599](https://cve.now/CVE-2013-3599.md): userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified… (no CVSS)
- [CVE-2013-3600](https://cve.now/CVE-2013-3600.md): Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to… (no CVSS)
- [CVE-2013-3601](https://cve.now/CVE-2013-3601.md): Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to… (no CVSS)
- [CVE-2013-3602](https://cve.now/CVE-2013-3602.md): SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated… (no CVSS)
- [CVE-2013-3603](https://cve.now/CVE-2013-3603.md): Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2013-3604](https://cve.now/CVE-2013-3604.md): Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject… (no CVSS)
- [CVE-2013-3605](https://cve.now/CVE-2013-3605.md): Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the… (no CVSS)
- [CVE-2013-5706](https://cve.now/CVE-2013-5706.md): Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject… (no CVSS)
- [CVE-2013-5707](https://cve.now/CVE-2013-5707.md): Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject… (no CVSS)
- [CVE-2013-5708](https://cve.now/CVE-2013-5708.md): Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.