# CVEs published 2011-03-16

14 CVEs were published on March 16, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0322](https://cve.now/CVE-2011-0322.md): Unspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote attackers to access resources via unknown v (no CVSS)
- [CVE-2011-0411](https://cve.now/CVE-2011-0411.md): The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properl (no CVSS)
- [CVE-2011-0442](https://cve.now/CVE-2011-0442.md): The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in (1) service requests and (2) e-mail messages, (no CVSS)
- [CVE-2011-0648](https://cve.now/CVE-2011-0648.md): Unspecified vulnerability in EMC Avamar before 5.0.4-30 allows remote authenticated users to gain privileges via unknown vectors. (no CVSS)
- [CVE-2011-0745](https://cve.now/CVE-2011-0745.md): SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which a (no CVSS)
- [CVE-2011-0751](https://cve.now/CVE-2011-0751.md): Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or r (no CVSS)
- [CVE-2011-0889](https://cve.now/CVE-2011-0889.md): Unspecified vulnerability in HP Client Automation Enterprise (aka HPCA or Radia Notify) 5.11, 7.2, 7.5, 7.8, and 7.9 allows remote attackers (no CVSS)
- [CVE-2011-1094](https://cve.now/CVE-2011-1094.md): kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of th (no CVSS)
- [CVE-2011-1153](https://cve.now/CVE-2011-1153.md): Multiple format string vulnerabilities in phar\_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to (no CVSS)
- [CVE-2011-1428](https://cve.now/CVE-2011-1428.md): Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name (no CVSS)
- [CVE-2011-1429](https://cve.now/CVE-2011-1429.md): Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the- (no CVSS)
- [CVE-2011-1430](https://cve.now/CVE-2011-1430.md): The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in- (no CVSS)
- [CVE-2011-1431](https://cve.now/CVE-2011-1431.md): The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O (no CVSS)
- [CVE-2011-1432](https://cve.now/CVE-2011-1432.md): The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to in (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.