# CVEs published 2011-09-15 33 CVEs were published on September 15, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-3321](https://cve.now/CVE-2011-3321.md): Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Po (no CVSS) - [CVE-2011-3211](https://cve.now/CVE-2011-3211.md): The server in Bcfg2 1.1.2 and earlier, and 1.2 prerelease, allows remote attackers to execute arbitrary commands via shell metacharacters in (no CVSS) - [CVE-2011-2671](https://cve.now/CVE-2011-2671.md): Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknow (no CVSS) - [CVE-2011-3322](https://cve.now/CVE-2011-3322.md): Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to (no CVSS) - [CVE-2011-3393](https://cve.now/CVE-2011-3393.md): Multiple cross-site scripting (XSS) vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary (no CVSS) - [CVE-2011-3394](https://cve.now/CVE-2011-3394.md): SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2011-0653](https://cve.now/CVE-2011-0653.md): Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows rem (no CVSS) - [CVE-2011-1353](https://cve.now/CVE-2011-1353.md): Unspecified vulnerability in Adobe Reader 10.x before 10.1.1 on Windows allows local users to gain privileges via unknown vectors. (no CVSS) - [CVE-2011-1890](https://cve.now/CVE-2011-1890.md): Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows r (no CVSS) - [CVE-2011-1891](https://cve.now/CVE-2011-1891.md): Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allo (no CVSS) - [CVE-2011-1892](https://cve.now/CVE-2011-1892.md): Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, O (no CVSS) - [CVE-2011-1893](https://cve.now/CVE-2011-1893.md): Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and ShareP (no CVSS) - [CVE-2011-1980](https://cve.now/CVE-2011-1980.md): Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL i (no CVSS) - [CVE-2011-1982](https://cve.now/CVE-2011-1982.md): Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, wh (no CVSS) - [CVE-2011-1984](https://cve.now/CVE-2011-1984.md): WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packe (no CVSS) - [CVE-2011-1986](https://cve.now/CVE-2011-1986.md): Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "E (no CVSS) - [CVE-2011-1987](https://cve.now/CVE-2011-1987.md): Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and (no CVSS) - [CVE-2011-1988](https://cve.now/CVE-2011-1988.md): Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel (no CVSS) - [CVE-2011-1989](https://cve.now/CVE-2011-1989.md): Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 20 (no CVSS) - [CVE-2011-1990](https://cve.now/CVE-2011-1990.md): Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Fo (no CVSS) - [CVE-2011-1991](https://cve.now/CVE-2011-1991.md): Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Serv (no CVSS) - [CVE-2011-2431](https://cve.now/CVE-2011-2431.md): Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecifie (no CVSS) - [CVE-2011-2432](https://cve.now/CVE-2011-2432.md): Buffer overflow in the U3D TIFF Resource in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attac (no CVSS) - [CVE-2011-2433](https://cve.now/CVE-2011-2433.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execut (no CVSS) - [CVE-2011-2434](https://cve.now/CVE-2011-2434.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execut (no CVSS) - [CVE-2011-2435](https://cve.now/CVE-2011-2435.md): Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary (no CVSS) - [CVE-2011-2436](https://cve.now/CVE-2011-2436.md): Heap-based buffer overflow in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1 (no CVSS) - [CVE-2011-2437](https://cve.now/CVE-2011-2437.md): Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execut (no CVSS) - [CVE-2011-2438](https://cve.now/CVE-2011-2438.md): Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x (no CVSS) - [CVE-2011-2439](https://cve.now/CVE-2011-2439.md): Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecifie (no CVSS) - [CVE-2011-2440](https://cve.now/CVE-2011-2440.md): Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to exec (no CVSS) - [CVE-2011-2441](https://cve.now/CVE-2011-2441.md): Multiple stack-based buffer overflows in CoolType.dll in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 (no CVSS) - [CVE-2011-2442](https://cve.now/CVE-2011-2442.md): Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecifie (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-09-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.