# CVEs published 2011-09-30

5 CVEs were published on September 30, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3369](https://cve.now/CVE-2011-3369.md): The add\_conversation function in conversations.c in EtherApe before 0.9.12 allows remote attackers to cause a denial of service (NULL pointe (no CVSS)
- [CVE-2011-3579](https://cve.now/CVE-2011-3579.md): server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly sen (no CVSS)
- [CVE-2011-3580](https://cve.now/CVE-2011-3580.md): IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the (no CVSS)
- [CVE-2011-2998](https://cve.now/CVE-2011-2998.md): Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibl (no CVSS)
- [CVE-2011-3010](https://cve.now/CVE-2011-3010.md): Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.