# CVEs published 2011-05-16

15 CVEs were published on May 16, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1407](https://cve.now/CVE-2011-1407.md): The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, whi (no CVSS)
- [CVE-2011-1828](https://cve.now/CVE-2011-1828.md): usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbi (no CVSS)
- [CVE-2011-1856](https://cve.now/CVE-2011-1856.md): Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitra (no CVSS)
- [CVE-2011-2141](https://cve.now/CVE-2011-2141.md): SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2011-2142](https://cve.now/CVE-2011-2142.md): The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and at (no CVSS)
- [CVE-2011-2143](https://cve.now/CVE-2011-2143.md): IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by u (no CVSS)
- [CVE-2011-2144](https://cve.now/CVE-2011-2144.md): The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a d (no CVSS)
- [CVE-2011-0419](https://cve.now/CVE-2011-0419.md): Stack consumption vulnerability in the fnmatch implementation in apr\_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and (no CVSS)
- [CVE-2011-0612](https://cve.now/CVE-2011-0612.md): Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption (no CVSS)
- [CVE-2011-0613](https://cve.now/CVE-2011-0613.md): Multiple cross-site scripting (XSS) vulnerabilities in RoboHelp 7 and 8, and RoboHelp Server 7 and 8, allow remote attackers to inject arbit (no CVSS)
- [CVE-2011-0614](https://cve.now/CVE-2011-0614.md): Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory corruption and application (no CVSS)
- [CVE-2011-0615](https://cve.now/CVE-2011-0615.md): Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2011-1799](https://cve.now/CVE-2011-1799.md): Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote (no CVSS)
- [CVE-2011-1800](https://cve.now/CVE-2011-1800.md): Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers (no CVSS)
- [CVE-2011-1899](https://cve.now/CVE-2011-1899.md): Multiple cross-site scripting (XSS) vulnerabilities in CA eHealth 6.0.x, 6.1.x, 6.2.1, and 6.2.2 allow remote attackers to inject arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.