# CVEs published 2011-09-27

25 CVEs were published on September 27, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4840](https://cve.now/CVE-2010-4840.md): Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (Sy (no CVSS)
- [CVE-2010-4841](https://cve.now/CVE-2010-4841.md): Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2011-3645](https://cve.now/CVE-2011-3645.md): Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.j (no CVSS)
- [CVE-2011-3684](https://cve.now/CVE-2011-3684.md): Multiple cross-site scripting (XSS) vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbit (no CVSS)
- [CVE-2011-3685](https://cve.now/CVE-2011-3685.md): Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to ob (no CVSS)
- [CVE-2011-3686](https://cve.now/CVE-2011-3686.md): Multiple cross-site scripting (XSS) vulnerabilities in myAddressBook.asp in Sonexis ConferenceManager 9.2.11.0 and 9.3.14.0 allow remote att (no CVSS)
- [CVE-2011-3687](https://cve.now/CVE-2011-3687.md): Multiple cross-site scripting (XSS) vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2011-3688](https://cve.now/CVE-2011-3688.md): Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via (1 (no CVSS)
- [CVE-2011-3689](https://cve.now/CVE-2011-3689.md): Cross-site scripting (XSS) vulnerability in Licenses.html in Wibu-Systems CodeMeter WebAdmin 3.30 and 4.30 allows remote attackers to inject (no CVSS)
- [CVE-2011-3690](https://cve.now/CVE-2011-3690.md): Untrusted search path vulnerability in PlotSoft PDFill PDF Editor 8.0 allows local users to gain privileges via a Trojan horse mfc70enu.dll (no CVSS)
- [CVE-2011-3691](https://cve.now/CVE-2011-3691.md): Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, d (no CVSS)
- [CVE-2011-3692](https://cve.now/CVE-2011-3692.md): NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensit (no CVSS)
- [CVE-2011-3693](https://cve.now/CVE-2011-3693.md): NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetSaro.fdb file. (no CVSS)
- [CVE-2011-3694](https://cve.now/CVE-2011-3694.md): The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appe (no CVSS)
- [CVE-2010-4842](https://cve.now/CVE-2010-4842.md): SQL injection vulnerability in admin/login.php in MHP DownloadScript (aka MH Products Download Center) 2.2 allows remote attackers to execut (no CVSS)
- [CVE-2010-4843](https://cve.now/CVE-2010-4843.md): SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2010-4844](https://cve.now/CVE-2010-4844.md): SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-4845](https://cve.now/CVE-2010-4845.md): Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts p (no CVSS)
- [CVE-2010-4846](https://cve.now/CVE-2010-4846.md): SQL injection vulnerability in view\_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2010-4847](https://cve.now/CVE-2010-4847.md): SQL injection vulnerability in view\_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2010-4848](https://cve.now/CVE-2010-4848.md): Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2010-4849](https://cve.now/CVE-2010-4849.md): SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2010-4850](https://cve.now/CVE-2010-4850.md): Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2010-4851](https://cve.now/CVE-2010-4851.md): Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the (1) ref or (2) poll (no CVSS)
- [CVE-2010-4852](https://cve.now/CVE-2010-4852.md): Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.