# CVEs published 2012-01-14

7 CVEs were published on January 14, 2012: 0 critical, 1 high. Days are UTC.

- [CVE-2011-1184](https://cve.now/CVE-2011-1184.md): The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-5062](https://cve.now/CVE-2011-5062.md): The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-5063](https://cve.now/CVE-2011-5063.md): The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2011-5064](https://cve.now/CVE-2011-5064.md): DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, an (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2012-0039](https://cve.now/CVE-2012-0039.md): GLib 2.31.8 and earlier, when the g\_str\_hash function is used, computes hash values without restricting the ability to trigger hash collisio (CVSS 7.5)
- [CVE-2011-5061](https://cve.now/CVE-2011-5061.md): functions.php in WHMCompleteSolution (WHMCS) 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty t (no CVSS)
- [CVE-2012-0693](https://cve.now/CVE-2012-0693.md): submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticke (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.