# CVEs published 2012-01-04

10 CVEs were published on January 4, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6751](https://cve.now/CVE-2007-6751.md): Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2011-4920](https://cve.now/CVE-2011-4920.md): Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitr (no CVSS)
- [CVE-2011-4921](https://cve.now/CVE-2011-4921.md): SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute (no CVSS)
- [CVE-2011-5049](https://cve.now/CVE-2011-5049.md): MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet t (no CVSS)
- [CVE-2011-5050](https://cve.now/CVE-2011-5050.md): SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authentica (no CVSS)
- [CVE-2011-5051](https://cve.now/CVE-2011-5051.md): Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute (no CVSS)
- [CVE-2011-5052](https://cve.now/CVE-2011-5052.md): Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a downlo (no CVSS)
- [CVE-2011-1384](https://cve.now/CVE-2011-1384.md): The (1) bin/invscoutClient\_VPD\_Survey and (2) sbin/invscout\_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and ear (no CVSS)
- [CVE-2011-1386](https://cve.now/CVE-2011-1386.md): IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not (no CVSS)
- [CVE-2011-3337](https://cve.now/CVE-2011-3337.md): eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris al (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.