# CVEs published 2011-07-17

17 CVEs were published on July 17, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1222](https://cve.now/CVE-2011-1222.md): Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5 (no CVSS)
- [CVE-2011-1223](https://cve.now/CVE-2011-1223.md): Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Mana (no CVSS)
- [CVE-2011-2501](https://cve.now/CVE-2011-2501.md): The png\_format\_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 (no CVSS)
- [CVE-2011-2690](https://cve.now/CVE-2011-2690.md): Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application (no CVSS)
- [CVE-2011-2691](https://cve.now/CVE-2011-2691.md): The png\_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a fu (no CVSS)
- [CVE-2011-2692](https://cve.now/CVE-2011-2692.md): The png\_handle\_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 do (no CVSS)
- [CVE-2011-2750](https://cve.now/CVE-2011-2750.md): NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pathname in an SRS OPE (no CVSS)
- [CVE-2011-2751](https://cve.now/CVE-2011-2751.md): SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2011-2752](https://cve.now/CVE-2011-2752.md): CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \\n (newline (no CVSS)
- [CVE-2011-2753](https://cve.now/CVE-2011-2753.md): Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentic (no CVSS)
- [CVE-2011-2754](https://cve.now/CVE-2011-2754.md): Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as u (no CVSS)
- [CVE-2011-2755](https://cve.now/CVE-2011-2755.md): Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read (no CVSS)
- [CVE-2011-2756](https://cve.now/CVE-2011-2756.md): FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to re (no CVSS)
- [CVE-2011-2757](https://cve.now/CVE-2011-2757.md): Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read (no CVSS)
- [CVE-2011-2758](https://cve.now/CVE-2011-2758.md): IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentica (no CVSS)
- [CVE-2011-2759](https://cve.now/CVE-2011-2759.md): The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not (no CVSS)
- [CVE-2011-2760](https://cve.now/CVE-2011-2760.md): Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.