# CVEs published 2011-12-16

59 CVEs were published on December 16, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3834](https://cve.now/CVE-2011-3834.md): Multiple integer overflows in the in\_avi.dll plugin in Winamp before 5.623 allow remote attackers to execute arbitrary code via an AVI file (no CVSS)
- [CVE-2011-4369](https://cve.now/CVE-2011-4369.md): Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through (no CVSS)
- [CVE-2011-4857](https://cve.now/CVE-2011-4857.md): Heap-based buffer overflow in the in\_mod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted son (no CVSS)
- [CVE-2011-4725](https://cve.now/CVE-2011-4725.md): Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 allow remote at (no CVSS)
- [CVE-2011-4726](https://cve.now/CVE-2011-4726.md): Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 al (no CVSS)
- [CVE-2011-4727](https://cve.now/CVE-2011-4727.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 does not properly validate string data that is intended f (no CVSS)
- [CVE-2011-4728](https://cve.now/CVE-2011-4728.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 does not set the secure flag for a cookie in an https ses (no CVSS)
- [CVE-2011-4729](https://cve.now/CVE-2011-4729.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header (no CVSS)
- [CVE-2011-4730](https://cve.now/CVE-2011-4730.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 generates a password form field without disabling the aut (no CVSS)
- [CVE-2011-4731](https://cve.now/CVE-2011-4731.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 includes an RFC 1918 IP address within a web page, which (no CVSS)
- [CVE-2011-4732](https://cve.now/CVE-2011-4732.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 omits the Content-Type header's charset parameter for cer (no CVSS)
- [CVE-2011-4733](https://cve.now/CVE-2011-4733.md): The Server Administration Panel in Parallels Plesk Panel 10.2.0\_build1011110331.18 sends incorrect Content-Type headers for certain resource (no CVSS)
- [CVE-2011-4734](https://cve.now/CVE-2011-4734.md): Multiple SQL injection vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to exec (no CVSS)
- [CVE-2011-4735](https://cve.now/CVE-2011-4735.md): Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote atta (no CVSS)
- [CVE-2011-4736](https://cve.now/CVE-2011-4736.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 receives cleartext password input over HTTP, which allows remote attacke (no CVSS)
- [CVE-2011-4737](https://cve.now/CVE-2011-4737.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which allows (no CVSS)
- [CVE-2011-4738](https://cve.now/CVE-2011-4738.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, (no CVSS)
- [CVE-2011-4739](https://cve.now/CVE-2011-4739.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete featu (no CVSS)
- [CVE-2011-4740](https://cve.now/CVE-2011-4740.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET request (no CVSS)
- [CVE-2011-4741](https://cve.now/CVE-2011-4741.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database connection string within a web page, which allows re (no CVSS)
- [CVE-2011-4742](https://cve.now/CVE-2011-4742.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are not intended for corr (no CVSS)
- [CVE-2011-4743](https://cve.now/CVE-2011-4743.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain resources, (no CVSS)
- [CVE-2011-4744](https://cve.now/CVE-2011-4744.md): The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might (no CVSS)
- [CVE-2011-4745](https://cve.now/CVE-2011-4745.md): Multiple cross-site scripting (XSS) vulnerabilities in the billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 allow remote a (no CVSS)
- [CVE-2011-4746](https://cve.now/CVE-2011-4746.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remo (no CVSS)
- [CVE-2011-4747](https://cve.now/CVE-2011-4747.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which make (no CVSS)
- [CVE-2011-4748](https://cve.now/CVE-2011-4748.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 has web pages containing e-mail addresses that are not intended for c (no CVSS)
- [CVE-2011-4749](https://cve.now/CVE-2011-4749.md): The billing system for Parallels Plesk Panel 10.3.1\_build1013110726.09 generates a password form field without disabling the autocomplete fe (no CVSS)
- [CVE-2011-4750](https://cve.now/CVE-2011-4750.md): Multiple cross-site scripting (XSS) vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2011-4751](https://cve.now/CVE-2011-4751.md): SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGetti (no CVSS)
- [CVE-2011-4752](https://cve.now/CVE-2011-4752.md): SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an (no CVSS)
- [CVE-2011-4753](https://cve.now/CVE-2011-4753.md): Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2011-4754](https://cve.now/CVE-2011-4754.md): Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2011-4755](https://cve.now/CVE-2011-4755.md): Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which al (no CVSS)
- [CVE-2011-4756](https://cve.now/CVE-2011-4756.md): Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier fo (no CVSS)
- [CVE-2011-4757](https://cve.now/CVE-2011-4757.md): Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easie (no CVSS)
- [CVE-2011-4758](https://cve.now/CVE-2011-4758.md): Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive i (no CVSS)
- [CVE-2011-4759](https://cve.now/CVE-2011-4759.md): Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query strings for (no CVSS)
- [CVE-2011-4760](https://cve.now/CVE-2011-4760.md): Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the loc (no CVSS)
- [CVE-2011-4761](https://cve.now/CVE-2011-4761.md): Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remot (no CVSS)
- [CVE-2011-4762](https://cve.now/CVE-2011-4762.md): Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers t (no CVSS)
- [CVE-2011-4763](https://cve.now/CVE-2011-4763.md): Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow rem (no CVSS)
- [CVE-2011-4764](https://cve.now/CVE-2011-4764.md): Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10. (no CVSS)
- [CVE-2011-4765](https://cve.now/CVE-2011-4765.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie (no CVSS)
- [CVE-2011-4766](https://cve.now/CVE-2011-4766.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code v (no CVSS)
- [CVE-2011-4767](https://cve.now/CVE-2011-4767.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are (no CVSS)
- [CVE-2011-4768](https://cve.now/CVE-2011-4768.md): The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter f (no CVSS)
- [CVE-2011-4776](https://cve.now/CVE-2011-4776.md): Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 allow remote attac (no CVSS)
- [CVE-2011-4777](https://cve.now/CVE-2011-4777.md): Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4\_build20111103.18 allow (no CVSS)
- [CVE-2011-4847](https://cve.now/CVE-2011-4847.md): SQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2011-4848](https://cve.now/CVE-2011-4848.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 includes a submitted password within an HTTP response body, which allows (no CVSS)
- [CVE-2011-4849](https://cve.now/CVE-2011-4849.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 does not set the secure flag for a cookie in an https session, which make (no CVSS)
- [CVE-2011-4850](https://cve.now/CVE-2011-4850.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, w (no CVSS)
- [CVE-2011-4851](https://cve.now/CVE-2011-4851.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 generates a password form field without disabling the autocomplete featur (no CVSS)
- [CVE-2011-4852](https://cve.now/CVE-2011-4852.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 generates web pages containing external links in response to GET requests (no CVSS)
- [CVE-2011-4853](https://cve.now/CVE-2011-4853.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 includes an RFC 1918 IP address within a web page, which allows remote at (no CVSS)
- [CVE-2011-4854](https://cve.now/CVE-2011-4854.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Co (no CVSS)
- [CVE-2011-4855](https://cve.now/CVE-2011-4855.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 omits the Content-Type header's charset parameter for certain resources, (no CVSS)
- [CVE-2011-4856](https://cve.now/CVE-2011-4856.md): The Control Panel in Parallels Plesk Panel 10.4.4\_build20111103.18 sends incorrect Content-Type headers for certain resources, which might a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.