# CVEs published 2011-07-29

11 CVEs were published on July 29, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2400](https://cve.now/CVE-2011-2400.md): Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-2401](https://cve.now/CVE-2011-2401.md): Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors. (no CVSS)
- [CVE-2011-2522](https://cve.now/CVE-2011-2522.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remo (no CVSS)
- [CVE-2011-2694](https://cve.now/CVE-2011-2694.md): Cross-site scripting (XSS) vulnerability in the chg\_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x b (no CVSS)
- [CVE-2011-2697](https://cve.now/CVE-2011-2697.md): foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted \*Foomatic (no CVSS)
- [CVE-2011-2964](https://cve.now/CVE-2011-2964.md): foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted \*Foomati (no CVSS)
- [CVE-2011-2959](https://cve.now/CVE-2011-2959.md): Stack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA (no CVSS)
- [CVE-2011-2960](https://cve.now/CVE-2011-2960.md): Heap-based buffer overflow in httpsvr.exe 6.0.5.3 in Sunway ForceControl 6.1 SP1, SP2, and SP3 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-2961](https://cve.now/CVE-2011-2961.md): Heap-based buffer overflow in AngelServer.exe 6.0.11.3 in Sunway pNetPower allows remote attackers to cause a denial of service (crash) and (no CVSS)
- [CVE-2011-2962](https://cve.now/CVE-2011-2962.md): Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a deni (no CVSS)
- [CVE-2011-2963](https://cve.now/CVE-2011-2963.md): TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.