# CVEs published 2012-02-21

37 CVEs were published on February 21, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1914](https://cve.now/CVE-2011-1914.md): Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OP (no CVSS)
- [CVE-2011-4521](https://cve.now/CVE-2011-4521.md): SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via crafted (no CVSS)
- [CVE-2011-4522](https://cve.now/CVE-2011-4522.md): Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2011-4523](https://cve.now/CVE-2011-4523.md): Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2011-4524](https://cve.now/CVE-2011-4524.md): Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in unsp (no CVSS)
- [CVE-2011-4525](https://cve.now/CVE-2011-4525.md): Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a cl (no CVSS)
- [CVE-2011-4526](https://cve.now/CVE-2011-4526.md): Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2011-4890](https://cve.now/CVE-2011-4890.md): The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) vi (no CVSS)
- [CVE-2012-0200](https://cve.now/CVE-2012-0200.md): The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to (no CVSS)
- [CVE-2012-0233](https://cve.now/CVE-2012-0233.md): Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2012-0234](https://cve.now/CVE-2012-0234.md): SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malfo (no CVSS)
- [CVE-2012-0235](https://cve.now/CVE-2012-0235.md): Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authenticat (no CVSS)
- [CVE-2012-0236](https://cve.now/CVE-2012-0236.md): Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. (no CVSS)
- [CVE-2012-0237](https://cve.now/CVE-2012-0237.md): Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing via (no CVSS)
- [CVE-2012-0238](https://cve.now/CVE-2012-0238.md): Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via u (no CVSS)
- [CVE-2012-0239](https://cve.now/CVE-2012-0239.md): uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify (no CVSS)
- [CVE-2012-0240](https://cve.now/CVE-2012-0240.md): GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to exec (no CVSS)
- [CVE-2012-0241](https://cve.now/CVE-2012-0241.md): Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream ident (no CVSS)
- [CVE-2012-0242](https://cve.now/CVE-2012-0242.md): Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string s (no CVSS)
- [CVE-2012-0243](https://cve.now/CVE-2012-0243.md): Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2012-0244](https://cve.now/CVE-2012-0244.md): Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2012-1234](https://cve.now/CVE-2012-1234.md): SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a ma (no CVSS)
- [CVE-2012-1235](https://cve.now/CVE-2012-1235.md): Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authenti (no CVSS)
- [CVE-2012-0865](https://cve.now/CVE-2012-0865.md): Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and co (no CVSS)
- [CVE-2012-0993](https://cve.now/CVE-2012-0993.md): Eval injection vulnerability in zp-core/zp-extensions/viewer\_size\_image.php in ZENphoto 1.4.2, when the viewer\_size\_image plugin is enabled, (no CVSS)
- [CVE-2012-0994](https://cve.now/CVE-2012-0994.md): SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users (no CVSS)
- [CVE-2012-0995](https://cve.now/CVE-2012-0995.md): Multiple cross-site scripting (XSS) vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2012-1218](https://cve.now/CVE-2012-1218.md): Multiple SQL injection vulnerabilities in freelancerKit 2.35 allow remote attackers to execute arbitrary SQL commands via unspecified vector (no CVSS)
- [CVE-2012-1219](https://cve.now/CVE-2012-1219.md): Multiple cross-site scripting (XSS) vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2012-1220](https://cve.now/CVE-2012-1220.md): Cross-site request forgery (CSRF) vulnerability in modules/config/admin\_utente.php in GAzie 5.20 and earlier allows remote attackers to hija (no CVSS)
- [CVE-2012-1221](https://cve.now/CVE-2012-1221.md): Directory traversal vulnerability in the telnet server in RabidHamster R2/Extreme 1.65 and earlier allows remote attackers to read arbitrary (no CVSS)
- [CVE-2012-1222](https://cve.now/CVE-2012-1222.md): Stack-based buffer overflow in RabidHamster R2/Extreme 1.65 and earlier allows remote authenticated users to execute arbitrary code via a lo (no CVSS)
- [CVE-2012-1223](https://cve.now/CVE-2012-1223.md): RabidHamster R2/Extreme 1.65 and earlier uses a small search space of values for the PIN number, which allows remote attackers to obtain the (no CVSS)
- [CVE-2012-1224](https://cve.now/CVE-2012-1224.md): Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2012-1225](https://cve.now/CVE-2012-1225.md): Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL com (no CVSS)
- [CVE-2012-1226](https://cve.now/CVE-2012-1226.md): Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute (no CVSS)
- [CVE-2012-1227](https://cve.now/CVE-2012-1227.md): Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.