# CVEs published 2017-03-21 22 CVEs were published on March 21, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-7215](https://cve.now/CVE-2017-7215.md): Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in… (no CVSS) - [CVE-2017-7214](https://cve.now/CVE-2017-7214.md): An issue was discovered in exception\_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. (no CVSS, nova) - [CVE-2016-4504](https://cve.now/CVE-2016-4504.md): A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions… (no CVSS, Meteocontrol WEB'log) - [CVE-2016-6650](https://cve.now/CVE-2016-6650.md): EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability… (no CVSS, EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint…) - [CVE-2017-3849](https://cve.now/CVE-2017-3849.md): A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and… (no CVSS, Cisco IOS and IOS XE) - [CVE-2017-3850](https://cve.now/CVE-2017-3850.md): A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE… (no CVSS, Cisco IOS and IOS XE) - [CVE-2017-5565](https://cve.now/CVE-2017-5565.md): Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+… (no CVSS) - [CVE-2017-5566](https://cve.now/CVE-2017-5566.md): Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1… (no CVSS) - [CVE-2017-5567](https://cve.now/CVE-2017-5567.md): Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier)… (no CVSS) - [CVE-2017-6186](https://cve.now/CVE-2017-6186.md): Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus… (no CVSS) - [CVE-2017-6417](https://cve.now/CVE-2017-6417.md): Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security… (no CVSS) - [CVE-2014-9939](https://cve.now/CVE-2014-9939.md): ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. (no CVSS) - [CVE-2017-7200](https://cve.now/CVE-2017-7200.md): An SSRF issue was discovered in OpenStack Glance before Newton. (no CVSS, glance) - [CVE-2017-7202](https://cve.now/CVE-2017-7202.md): Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. (no CVSS) - [CVE-2017-7203](https://cve.now/CVE-2017-7203.md): A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. (no CVSS) - [CVE-2017-7204](https://cve.now/CVE-2017-7204.md): A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. (no CVSS, imdbphp/imdbphp) - [CVE-2017-7205](https://cve.now/CVE-2017-7205.md): A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. (no CVSS) - [CVE-2017-7206](https://cve.now/CVE-2017-7206.md): The ff\_h2645\_extract\_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer… (no CVSS) - [CVE-2017-7207](https://cve.now/CVE-2017-7207.md): The mem\_get\_bits\_rectangle function in Artifex Software, Inc. (no CVSS) - [CVE-2017-7208](https://cve.now/CVE-2017-7208.md): The decode\_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain… (no CVSS) - [CVE-2017-7209](https://cve.now/CVE-2017-7209.md): The dump\_section\_as\_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt… (no CVSS) - [CVE-2017-7210](https://cve.now/CVE-2017-7210.md): objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2017-03-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.