# CVEs published 2011-02-14 18 CVEs were published on February 14, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2008-7274](https://cve.now/CVE-2008-7274.md): IBM WebSphere Application Server (WAS) 6.1.0.9, when the JAAS Login functionality is enabled, allows attackers to perform an internal applic (no CVSS) - [CVE-2010-4730](https://cve.now/CVE-2010-4730.md): Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and S (no CVSS) - [CVE-2010-4731](https://cve.now/CVE-2010-4731.md): Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, a (no CVSS) - [CVE-2010-4732](https://cve.now/CVE-2010-4732.md): cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the In (no CVSS) - [CVE-2010-4733](https://cve.now/CVE-2010-4733.md): WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB (no CVSS) - [CVE-2011-1032](https://cve.now/CVE-2011-1032.md): IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login m (no CVSS) - [CVE-2011-1033](https://cve.now/CVE-2011-1033.md): Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via craft (no CVSS) - [CVE-2011-0986](https://cve.now/CVE-2011-0986.md): phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) (no CVSS, phpmyadmin/phpmyadmin) - [CVE-2011-0987](https://cve.now/CVE-2011-0987.md): The PMA\_Bookmark\_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not proper (no CVSS) - [CVE-2011-1029](https://cve.now/CVE-2011-1029.md): Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary we (no CVSS) - [CVE-2011-1030](https://cve.now/CVE-2011-1030.md): Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2011-1031](https://cve.now/CVE-2011-1031.md): The feh\_unique\_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack (no CVSS) - [CVE-2011-0446](https://cve.now/CVE-2011-0446.md): Multiple cross-site scripting (XSS) vulnerabilities in the mail\_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascr (no CVSS, actionpack ยท actionview) - [CVE-2011-0447](https://cve.now/CVE-2011-0447.md): Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Reques (no CVSS, actionpack) - [CVE-2011-0696](https://cve.now/CVE-2011-0696.md): Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which mak (no CVSS, django) - [CVE-2011-0697](https://cve.now/CVE-2011-0697.md): Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrar (no CVSS, django) - [CVE-2011-0698](https://cve.now/CVE-2011-0698.md): Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or exe (no CVSS, django) - [CVE-2011-0702](https://cve.now/CVE-2011-0702.md): The feh\_unique\_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack o (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-02-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.