# CVEs published 2012-03-28

17 CVEs were published on March 28, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6753](https://cve.now/CVE-2007-6753.md): Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7, (no CVSS)
- [CVE-2012-0772](https://cve.now/CVE-2012-0772.md): An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows (no CVSS)
- [CVE-2012-0773](https://cve.now/CVE-2012-0773.md): The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player befo (no CVSS)
- [CVE-2007-6752](https://cve.now/CVE-2007-6752.md): Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary (no CVSS)
- [CVE-2012-0125](https://cve.now/CVE-2012-0125.md): Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unk (no CVSS)
- [CVE-2012-0126](https://cve.now/CVE-2012-0126.md): Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic info (no CVSS)
- [CVE-2012-1570](https://cve.now/CVE-2012-1570.md): The resolver in MaraDNS before 1.3.0.7.15 and 1.4.x before 1.4.12 overwrites cached server names and TTL values in NS records during the pro (no CVSS)
- [CVE-2012-1904](https://cve.now/CVE-2012-1904.md): mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and e (no CVSS)
- [CVE-2012-1907](https://cve.now/CVE-2012-1907.md): The scanner engine in PrivaWall Antivirus 5.6 and earlier does not recognize the Office XML (aka Open Document XML) file format, which allow (no CVSS)
- [CVE-2012-1924](https://cve.now/CVE-2012-1924.md): Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window fo (no CVSS)
- [CVE-2012-1925](https://cve.now/CVE-2012-1925.md): Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote (no CVSS)
- [CVE-2012-1926](https://cve.now/CVE-2012-1926.md): Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState funct (no CVSS)
- [CVE-2012-1927](https://cve.now/CVE-2012-1927.md): Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a differen (no CVSS)
- [CVE-2012-1928](https://cve.now/CVE-2012-1928.md): Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different doma (no CVSS)
- [CVE-2012-1929](https://cve.now/CVE-2012-1929.md): Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page (no CVSS)
- [CVE-2012-1930](https://cve.now/CVE-2012-1930.md): Opera before 11.62 on UNIX uses world-readable permissions for temporary files during printing, which allows local users to obtain sensitive (no CVSS)
- [CVE-2012-1931](https://cve.now/CVE-2012-1931.md): Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to overwrite arbitrary fil (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.