# CVEs published 2011-04-15

17 CVEs were published on April 15, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1712](https://cve.now/CVE-2011-1712.md): The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp in Mozilla Firefox before 3.5.1 (no CVSS)
- [CVE-2011-1713](https://cve.now/CVE-2011-1713.md): Microsoft msxml.dll, as used in Internet Explorer 8 on Windows 7, allows remote attackers to obtain potentially sensitive information about (no CVSS)
- [CVE-2011-0195](https://cve.now/CVE-2011-0195.md): The generate-id XPath function in libxslt in Apple iOS 4.3.x before 4.3.2 allows remote attackers to obtain potentially sensitive informatio (no CVSS)
- [CVE-2011-1300](https://cve.now/CVE-2011-1300.md): The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics L (no CVSS)
- [CVE-2011-1301](https://cve.now/CVE-2011-1301.md): Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2011-1302](https://cve.now/CVE-2011-1302.md): Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unk (no CVSS)
- [CVE-2011-1653](https://cve.now/CVE-2011-1653.md): Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote atta (no CVSS)
- [CVE-2011-1654](https://cve.now/CVE-2011-1654.md): Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defens (no CVSS)
- [CVE-2011-1655](https://cve.now/CVE-2011-1655.md): The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 (no CVSS)
- [CVE-2011-0285](https://cve.now/CVE-2011-0285.md): The process\_chpw\_request function in schpw.c in the password-changing functionality in kadmind in MIT Kerberos 5 (aka krb5) 1.7 through 1.9 (no CVSS)
- [CVE-2011-0896](https://cve.now/CVE-2011-0896.md): Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of s (no CVSS)
- [CVE-2011-0897](https://cve.now/CVE-2011-0897.md): Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 allows local users to read arbitrary files via unknown vectors. (no CVSS)
- [CVE-2011-0898](https://cve.now/CVE-2011-0898.md): Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.00 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2011-1531](https://cve.now/CVE-2011-1531.md): The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fa (no CVSS)
- [CVE-2011-1532](https://cve.now/CVE-2011-1532.md): Unspecified vulnerability in the SNMP component on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-i (no CVSS)
- [CVE-2011-1533](https://cve.now/CVE-2011-1533.md): Cross-site scripting (XSS) vulnerability on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, (no CVSS)
- [CVE-2011-1691](https://cve.now/CVE-2011-1691.md): The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit be (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-04-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.