# CVEs published 2011-06-02 18 CVEs were published on June 2, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2009-4008](https://cve.now/CVE-2009-4008.md): Unbound before 1.4.4 does not send responses for signed zones after mishandling an unspecified query, which allows remote attackers to cause (no CVSS) - [CVE-2011-1026](https://cve.now/CVE-2011-1026.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attacke (no CVSS) - [CVE-2011-1077](https://cve.now/CVE-2011-1077.md): Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to i (no CVSS) - [CVE-2011-1220](https://cve.now/CVE-2011-1220.md): Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote aut (no CVSS) - [CVE-2011-1602](https://cve.now/CVE-2011-1602.md): The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via (no CVSS) - [CVE-2011-1603](https://cve.now/CVE-2011-1603.md): Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vector (no CVSS) - [CVE-2011-1623](https://cve.now/CVE-2011-1623.md): Cisco Media Processing Software before 1.2 on Media Experience Engine (MXE) 5600 devices has a default root password, which makes it easier (no CVSS) - [CVE-2011-1637](https://cve.now/CVE-2011-1637.md): Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 do not properly verify signatures for software images, whic (no CVSS) - [CVE-2011-2024](https://cve.now/CVE-2011-2024.md): Cisco Network Registrar before 7.2 has a default administrative password, which makes it easier for remote attackers to obtain access via a (no CVSS) - [CVE-2011-2041](https://cve.now/CVE-2011-2041.md): The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Win (no CVSS) - [CVE-2011-2328](https://cve.now/CVE-2011-2328.md): Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via (no CVSS) - [CVE-2011-2329](https://cve.now/CVE-2011-2329.md): The rampart\_timestamp\_token\_validate function in util/rampart\_timestamp\_token.c in Apache Rampart/C 1.3.0 does not properly calculate the ex (no CVSS) - [CVE-2011-2330](https://cve.now/CVE-2011-2330.md): Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" ac (no CVSS) - [CVE-2011-2331](https://cve.now/CVE-2011-2331.md): Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute arbitrary code via a crafted length (no CVSS) - [CVE-2011-0730](https://cve.now/CVE-2011-0730.md): Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpr (no CVSS) - [CVE-2011-1947](https://cve.now/CVE-2011-1947.md): fetchmail 5.9.9 through 6.3.19 does not properly limit the wait time after issuing a (1) STARTTLS or (2) STLS request, which allows remote s (no CVSS) - [CVE-2011-2039](https://cve.now/CVE-2011-2039.md): The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows (no CVSS) - [CVE-2011-2040](https://cve.now/CVE-2011-2040.md): The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-06-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.