# CVEs published 2017-02-21

21 CVEs were published on February 21, 2017: 2 critical, 1 high. Days are UTC.

- [CVE-2016-9049](https://cve.now/CVE-2016-9049.md): An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. (CVSS 7.5, Aerospike Database Server)
- [CVE-2016-9051](https://cve.now/CVE-2016-9051.md): An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server… (CVSS 9.8, Aerospike Database Server)
- [CVE-2016-9053](https://cve.now/CVE-2016-9053.md): An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. (CVSS 9.8, Aerospike Database Server)
- [CVE-2017-6127](https://cve.now/CVE-2017-6127.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware… (no CVSS)
- [CVE-2015-4056](https://cve.now/CVE-2015-4056.md): The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for… (no CVSS)
- [CVE-2015-4057](https://cve.now/CVE-2015-4057.md): The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the… (no CVSS)
- [CVE-2016-10227](https://cve.now/CVE-2016-10227.md): Zyxel USG50 Security Appliance and NWA3560-N Access Point allow remote attackers to cause a denial of service (CPU consumption) via a… (no CVSS)
- [CVE-2016-9269](https://cve.now/CVE-2016-9269.md): Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA)… (no CVSS)
- [CVE-2016-9314](https://cve.now/CVE-2016-9314.md): Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance… (no CVSS)
- [CVE-2016-9315](https://cve.now/CVE-2016-9315.md): Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual… (no CVSS)
- [CVE-2016-9316](https://cve.now/CVE-2016-9316.md): Multiple stored Cross-Site-Scripting (XSS) vulnerabilities in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro… (no CVSS)
- [CVE-2017-5881](https://cve.now/CVE-2017-5881.md): GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact… (no CVSS)
- [CVE-2017-5959](https://cve.now/CVE-2017-5959.md): CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. (no CVSS)
- [CVE-2017-6070](https://cve.now/CVE-2017-6070.md): CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the… (no CVSS)
- [CVE-2017-6071](https://cve.now/CVE-2017-6071.md): CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via… (no CVSS)
- [CVE-2017-6072](https://cve.now/CVE-2017-6072.md): CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via… (no CVSS)
- [CVE-2017-6078](https://cve.now/CVE-2017-6078.md): FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image… (no CVSS)
- [CVE-2017-6095](https://cve.now/CVE-2017-6095.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6096](https://cve.now/CVE-2017-6096.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6097](https://cve.now/CVE-2017-6097.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6098](https://cve.now/CVE-2017-6098.md): A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.