# CVEs published 2012-03-19

33 CVEs were published on March 19, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0328](https://cve.now/CVE-2012-0328.md): Janetter before 3.3.0.0 (aka 3.3.0) allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors. (no CVSS)
- [CVE-2012-1181](https://cve.now/CVE-2012-1181.md): fcgid\_spawn\_ctl.c in the mod\_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a (no CVSS)
- [CVE-2012-1236](https://cve.now/CVE-2012-1236.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Janetter before 3.3.0.0 (aka 3.3.0) allow remote attackers to hijack the authe (no CVSS)
- [CVE-2012-0054](https://cve.now/CVE-2012-0054.md): libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, as used in backtrack and possibly other products, a (no CVSS, golismero)
- [CVE-2012-0808](https://cve.now/CVE-2012-0808.md): as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users (no CVSS)
- [CVE-2012-0872](https://cve.now/CVE-2012-0872.md): Multiple cross-site scripting (XSS) vulnerabilities in OxWall 1.1.1 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2012-1039](https://cve.now/CVE-2012-1039.md): Multiple cross-site scripting (XSS) vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2012-1464](https://cve.now/CVE-2012-1464.md): Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a request with a trai (no CVSS)
- [CVE-2012-1465](https://cve.now/CVE-2012-1465.md): Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2012-1466](https://cve.now/CVE-2012-1466.md): The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script (no CVSS)
- [CVE-2012-1498](https://cve.now/CVE-2012-1498.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Webfolio CMS 1.1.4 and earlier allow remote attackers to hijack the authentica (no CVSS)
- [CVE-2009-5112](https://cve.now/CVE-2009-5112.md): wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request. (no CVSS)
- [CVE-2009-5113](https://cve.now/CVE-2009-5113.md): Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2009-5114](https://cve.now/CVE-2009-5114.md): Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2010-5086](https://cve.now/CVE-2010-5086.md): Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2011-5082](https://cve.now/CVE-2011-5082.md): Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2011-5083](https://cve.now/CVE-2011-5083.md): Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2012-1297](https://cve.now/CVE-2012-1297.md): Multiple cross-site request forgery (CSRF) vulnerabilities in main.php in Contao (formerly TYPOlight) 2.11.0 and earlier allow remote attack (no CVSS)
- [CVE-2012-1778](https://cve.now/CVE-2012-1778.md): SQL injection vulnerability in artykul\_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2012-1779](https://cve.now/CVE-2012-1779.md): Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2012-1780](https://cve.now/CVE-2012-1780.md): SQL injection vulnerability in search.php in SocialCMS 1.0.5 allows remote attackers to execute arbitrary SQL commands via the category para (no CVSS)
- [CVE-2012-1781](https://cve.now/CVE-2012-1781.md): Multiple cross-site scripting (XSS) vulnerabilities in ajax/commentajax.php in SocialCMS 1.0.5 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2012-1782](https://cve.now/CVE-2012-1782.md): Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2012-1783](https://cve.now/CVE-2012-1783.md): Tiny Server 1.1.9 and earlier allows remote attackers to cause a denial of service (crash) via a long string in a GET request without an HTT (no CVSS)
- [CVE-2012-1784](https://cve.now/CVE-2012-1784.md): SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile (no CVSS)
- [CVE-2012-1785](https://cve.now/CVE-2012-1785.md): kg\_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary comm (no CVSS)
- [CVE-2012-1786](https://cve.now/CVE-2012-1786.md): The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the install (no CVSS)
- [CVE-2012-1787](https://cve.now/CVE-2012-1787.md): Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitr (no CVSS)
- [CVE-2012-1788](https://cve.now/CVE-2012-1788.md): Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-1789](https://cve.now/CVE-2012-1789.md): Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2012-1790](https://cve.now/CVE-2012-1790.md): Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the f (no CVSS)
- [CVE-2012-1775](https://cve.now/CVE-2012-1775.md): Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// (no CVSS)
- [CVE-2012-1776](https://cve.now/CVE-2012-1776.md): Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (applicat (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-03-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.