# CVEs published 2011-12-06

7 CVEs were published on December 6, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4130](https://cve.now/CVE-2011-4130.md): Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via ve (no CVSS)
- [CVE-2011-4552](https://cve.now/CVE-2011-4552.md): Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2011-4553](https://cve.now/CVE-2011-4553.md): Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites an (no CVSS)
- [CVE-2011-4554](https://cve.now/CVE-2011-4554.md): One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline character (no CVSS)
- [CVE-2011-4555](https://cve.now/CVE-2011-4555.md): One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a d (no CVSS)
- [CVE-2011-4677](https://cve.now/CVE-2011-4677.md): One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attacker (no CVSS)
- [CVE-2011-4678](https://cve.now/CVE-2011-4678.md): The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.