# CVEs published 2017-04-29

9 CVEs were published on April 29, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-8325](https://cve.now/CVE-2017-8325.md): The iw\_process\_cols\_to\_intermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers… (no CVSS)
- [CVE-2017-8326](https://cve.now/CVE-2017-8326.md): libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might… (no CVSS)
- [CVE-2017-8327](https://cve.now/CVE-2017-8327.md): The bmpr\_read\_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a… (no CVSS)
- [CVE-2017-7957](https://cve.now/CVE-2017-7957.md): XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'voi (no CVSS, com.thoughtworks.xstream:xstream)
- [CVE-2017-8114](https://cve.now/CVE-2017-8114.md): Roundcube Webmail allows arbitrary password resets by authenticated users. (no CVSS)
- [CVE-2017-6553](https://cve.now/CVE-2017-6553.md): Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the… (no CVSS)
- [CVE-2017-7981](https://cve.now/CVE-2017-7981.md): Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. (no CVSS)
- [CVE-2017-7644](https://cve.now/CVE-2017-7644.md): The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote… (no CVSS)
- [CVE-2017-7945](https://cve.now/CVE-2017-7945.md): The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.