# CVEs published 2011-07-07

12 CVEs were published on July 7, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1224](https://cve.now/CVE-2011-1224.md): IBM WebSphere MQ 6.0 before 6.0.2.11 and 7.0 before 7.0.1.5 does not use the CRL Distribution Points (CDP) certificate extension, which migh (no CVSS)
- [CVE-2011-1498](https://cve.now/CVE-2011-1498.md): Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization he (no CVSS, org.apache.httpcomponents:httpclient)
- [CVE-2011-1931](https://cve.now/CVE-2011-1931.md): sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media playe (no CVSS)
- [CVE-2011-1946](https://cve.now/CVE-2011-1946.md): gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setu (no CVSS)
- [CVE-2011-2192](https://cve.now/CVE-2011-2192.md): The Curl\_input\_negotiate function in http\_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs (no CVSS)
- [CVE-2011-1336](https://cve.now/CVE-2011-1336.md): Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file. (no CVSS)
- [CVE-2011-2597](https://cve.now/CVE-2011-2597.md): The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-2678](https://cve.now/CVE-2011-2678.md): The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\\INTERACTIVE:F) for cvpnd.exe, (no CVSS)
- [CVE-2011-2679](https://cve.now/CVE-2011-2679.md): Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2011-2680](https://cve.now/CVE-2011-2680.md): Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the (no CVSS)
- [CVE-2011-2681](https://cve.now/CVE-2011-2681.md): IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vecto (no CVSS)
- [CVE-2011-2682](https://cve.now/CVE-2011-2682.md): The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (li (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.