# CVEs published 2011-10-24 9 CVEs were published on October 24, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-4171](https://cve.now/CVE-2011-4171.md): Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject (no CVSS) - [CVE-2011-4172](https://cve.now/CVE-2011-4172.md): Multiple cross-site scripting (XSS) vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2011-4173](https://cve.now/CVE-2011-4173.md): Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authen (no CVSS) - [CVE-2011-2655](https://cve.now/CVE-2011-2655.md): Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code vi (no CVSS) - [CVE-2011-2656](https://cve.now/CVE-2011-2656.md): Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code vi (no CVSS) - [CVE-2011-3383](https://cve.now/CVE-2011-3383.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2011-3615](https://cve.now/CVE-2011-3615.md): Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute a (no CVSS) - [CVE-2011-3983](https://cve.now/CVE-2011-3983.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2011-3984](https://cve.now/CVE-2011-3984.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-10-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.