# CVEs published 2012-01-02

4 CVEs were published on January 2, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3657](https://cve.now/CVE-2011-3657.md): Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x bef (no CVSS)
- [CVE-2011-3667](https://cve.now/CVE-2011-3667.md): The User.offer\_account\_by\_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x befor (no CVSS)
- [CVE-2011-3668](https://cve.now/CVE-2011-3668.md): Cross-site request forgery (CSRF) vulnerability in post\_bug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijac (no CVSS)
- [CVE-2011-3669](https://cve.now/CVE-2011-3669.md): Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hij (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.