# CVEs published 2011-05-13

41 CVEs were published on May 13, 2011: 0 critical, 1 high. Days are UTC.

- [CVE-2011-0579](https://cve.now/CVE-2011-0579.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to obtain (no CVSS)
- [CVE-2011-0618](https://cve.now/CVE-2011-0618.md): Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows (no CVSS)
- [CVE-2011-0619](https://cve.now/CVE-2011-0619.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0620](https://cve.now/CVE-2011-0620.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0621](https://cve.now/CVE-2011-0621.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0622](https://cve.now/CVE-2011-0622.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0623](https://cve.now/CVE-2011-0623.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0624](https://cve.now/CVE-2011-0624.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0625](https://cve.now/CVE-2011-0625.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0626](https://cve.now/CVE-2011-0626.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute (no CVSS)
- [CVE-2011-0627](https://cve.now/CVE-2011-0627.md): Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to (CVSS 8.8)
- [CVE-2011-0633](https://cve.now/CVE-2011-0633.md): The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in envir (no CVSS)
- [CVE-2011-1326](https://cve.now/CVE-2011-1326.md): Unspecified vulnerability on the La Fonera+ router with firmware before 1.7.0.1 allows remote attackers to cause a denial of service via unk (no CVSS)
- [CVE-2011-1402](https://cve.now/CVE-2011-1402.md): Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit (no CVSS)
- [CVE-2011-1403](https://cve.now/CVE-2011-1403.md): Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the (no CVSS)
- [CVE-2011-1404](https://cve.now/CVE-2011-1404.md): Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensit (no CVSS)
- [CVE-2011-1405](https://cve.now/CVE-2011-1405.md): Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2011-1406](https://cve.now/CVE-2011-1406.md): Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier for user-assisted remo (no CVSS)
- [CVE-2011-0341](https://cve.now/CVE-2011-0341.md): Stack-based buffer overflow in the pdfmoz\_onmouse function in apps/mozilla/moz\_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows rem (no CVSS)
- [CVE-2011-0761](https://cve.now/CVE-2011-0761.md): Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging a (no CVSS)
- [CVE-2011-0995](https://cve.now/CVE-2011-0995.md): The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspe (no CVSS, sqlite3-ruby)
- [CVE-2011-1248](https://cve.now/CVE-2011-1248.md): WINS in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, R2, and R2 SP1 does not properly handle socket send exceptions, which a (no CVSS)
- [CVE-2011-1269](https://cve.now/CVE-2011-1269.md): Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Comp (no CVSS)
- [CVE-2011-1270](https://cve.now/CVE-2011-1270.md): Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint doc (no CVSS)
- [CVE-2011-1325](https://cve.now/CVE-2011-1325.md): Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified (no CVSS)
- [CVE-2011-1720](https://cve.now/CVE-2011-1720.md): The SMTP server in Postfix before 2.5.13, 2.6.x before 2.6.10, 2.7.x before 2.7.4, and 2.8.x before 2.8.3, when certain Cyrus SASL authentic (no CVSS)
- [CVE-2011-1737](https://cve.now/CVE-2011-1737.md): Multiple cross-site scripting (XSS) vulnerabilities in the Email application in HP Palm webOS 1.4.5 and 1.4.5.1 allow remote attackers to in (no CVSS)
- [CVE-2011-1738](https://cve.now/CVE-2011-1738.md): HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain priv (no CVSS)
- [CVE-2011-1772](https://cve.now/CVE-2011-1772.md): Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWo (no CVSS, org.apache.struts:struts2-core)
- [CVE-2011-1840](https://cve.now/CVE-2011-1840.md): The MartiniCreations PassmanLite Password Manager application before 1.48 for Android stores the master password and unspecified other accou (no CVSS)
- [CVE-2011-1848](https://cve.now/CVE-2011-1848.md): Stack-based buffer overflow in img.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbi (no CVSS)
- [CVE-2011-1849](https://cve.now/CVE-2011-1849.md): tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subse (no CVSS)
- [CVE-2011-1850](https://cve.now/CVE-2011-1850.md): Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows r (no CVSS)
- [CVE-2011-1851](https://cve.now/CVE-2011-1851.md): Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execu (no CVSS)
- [CVE-2011-1852](https://cve.now/CVE-2011-1852.md): Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allow remote attackers (no CVSS)
- [CVE-2011-1853](https://cve.now/CVE-2011-1853.md): tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) lar (no CVSS)
- [CVE-2011-1854](https://cve.now/CVE-2011-1854.md): Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2011-1855](https://cve.now/CVE-2011-1855.md): Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows local users to read or modify (1) log files or (2) other data via (no CVSS)
- [CVE-2011-2087](https://cve.now/CVE-2011-2087.md): Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts (no CVSS, org.apache.struts:struts2-parent)
- [CVE-2011-2088](https://cve.now/CVE-2011-2088.md): XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive (no CVSS, org.apache.struts.xwork:xwork-core)
- [CVE-2011-2089](https://cve.now/CVE-2011-2089.md): Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsys (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.