# CVEs published 2011-02-25 37 CVEs were published on February 25, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2010-4227](https://cve.now/CVE-2010-4227.md): The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or ex (no CVSS) - [CVE-2011-0332](https://cve.now/CVE-2011-0332.md): Integer overflow in Foxit Reader before 4.3.1.0218 and Foxit Phantom before 2.3.3.1112 allows remote attackers to execute arbitrary code via (no CVSS) - [CVE-2011-0717](https://cve.now/CVE-2011-0717.md): Session fixation vulnerability in Red Hat Network (RHN) Satellite Server 5.4 allows remote attackers to hijack web sessions via unspecified (no CVSS) - [CVE-2011-0718](https://cve.now/CVE-2011-0718.md): Red Hat Network (RHN) Satellite Server 5.4 does not use a time delay after a failed login attempt, which makes it easier for remote attacker (no CVSS) - [CVE-2011-1018](https://cve.now/CVE-2011-1018.md): logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstr (no CVSS) - [CVE-2011-1101](https://cve.now/CVE-2011-1101.md): Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Manage (no CVSS) - [CVE-2011-1102](https://cve.now/CVE-2011-1102.md): Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix (no CVSS) - [CVE-2011-1103](https://cve.now/CVE-2011-1103.md): The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.0 (no CVSS) - [CVE-2011-0037](https://cve.now/CVE-2011-0037.md): Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Securi (no CVSS) - [CVE-2011-0926](https://cve.now/CVE-2011-0926.md): A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified down (no CVSS) - [CVE-2011-1036](https://cve.now/CVE-2011-1036.md): The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, (no CVSS) - [CVE-2011-1100](https://cve.now/CVE-2011-1100.md): Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL comma (no CVSS) - [CVE-2011-0372](https://cve.now/CVE-2011-0372.md): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary (no CVSS) - [CVE-2011-0373](https://cve.now/CVE-2011-0373.md): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute (no CVSS) - [CVE-2011-0374](https://cve.now/CVE-2011-0374.md): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute (no CVSS) - [CVE-2011-0375](https://cve.now/CVE-2011-0375.md): The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute (no CVSS) - [CVE-2011-0376](https://cve.now/CVE-2011-0376.md): The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers t (no CVSS) - [CVE-2011-0377](https://cve.now/CVE-2011-0377.md): Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service (service crash) vi (no CVSS) - [CVE-2011-0378](https://cve.now/CVE-2011-0378.md): The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbit (no CVSS) - [CVE-2011-0379](https://cve.now/CVE-2011-0379.md): Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (C (no CVSS) - [CVE-2011-0380](https://cve.now/CVE-2011-0380.md): Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed (no CVSS) - [CVE-2011-0381](https://cve.now/CVE-2011-0381.md): Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary cod (no CVSS) - [CVE-2011-0382](https://cve.now/CVE-2011-0382.md): The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitra (no CVSS) - [CVE-2011-0383](https://cve.now/CVE-2011-0383.md): The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint (no CVSS) - [CVE-2011-0384](https://cve.now/CVE-2011-0384.md): The Java Servlet framework on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x does not requ (no CVSS) - [CVE-2011-0385](https://cve.now/CVE-2011-0385.md): The administrative web interface on Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (no CVSS) - [CVE-2011-0386](https://cve.now/CVE-2011-0386.md): The XML-RPC implementation on Cisco TelePresence Recording Server devices with software 1.6.x and 1.7.x before 1.7.1 allows remote attackers (no CVSS) - [CVE-2011-0387](https://cve.now/CVE-2011-0387.md): The administrative web interface on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allows (no CVSS) - [CVE-2011-0388](https://cve.now/CVE-2011-0388.md): Cisco TelePresence Recording Server devices with software 1.6.x and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, (no CVSS) - [CVE-2011-0389](https://cve.now/CVE-2011-0389.md): Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of (no CVSS) - [CVE-2011-0390](https://cve.now/CVE-2011-0390.md): The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows (no CVSS) - [CVE-2011-0391](https://cve.now/CVE-2011-0391.md): Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and (no CVSS) - [CVE-2011-0392](https://cve.now/CVE-2011-0392.md): Cisco TelePresence Recording Server devices with software 1.6.x do not require authentication for an XML-RPC interface, which allows remote (no CVSS) - [CVE-2011-0393](https://cve.now/CVE-2011-0393.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.12), 7.1 and 7.2 before 7.2(5.2), 8.0 before 8.0 (no CVSS) - [CVE-2011-0394](https://cve.now/CVE-2011-0394.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0 (no CVSS) - [CVE-2011-0395](https://cve.now/CVE-2011-0395.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), an (no CVSS) - [CVE-2011-0396](https://cve.now/CVE-2011-0396.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-02-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.