# CVEs published 2011-07-11

8 CVEs were published on July 11, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0549](https://cve.now/CVE-2011-0549.md): SQL injection vulnerability in forget.php in the management GUI in Symantec Web Gateway 4.5.x allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2011-1338](https://cve.now/CVE-2011-1338.md): Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder s (no CVSS)
- [CVE-2011-1526](https://cve.now/CVE-2011-1526.md): ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5\_setegid re (no CVSS)
- [CVE-2011-1867](https://cve.now/CVE-2011-1867.md): Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense ( (no CVSS)
- [CVE-2011-1951](https://cve.now/CVE-2011-1951.md): lib/logmatcher.c in Balabit syslog-ng before 3.2.4, when the global flag is set and when using PCRE 8.12 and possibly other versions, allows (no CVSS)
- [CVE-2011-2064](https://cve.now/CVE-2011-2064.md): Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a de (no CVSS)
- [CVE-2011-2398](https://cve.now/CVE-2011-2398.md): Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges or cause a d (no CVSS)
- [CVE-2011-2516](https://cve.now/CVE-2011-2516.md): Off-by-one error in the XML signature feature in Apache XML Security for C++ 1.6.0, as used in Shibboleth before 2.4.3 and possibly other pr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.