# CVEs published 2012-04-18

14 CVEs were published on April 18, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5088](https://cve.now/CVE-2011-5088.md): The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, (no CVSS)
- [CVE-2011-5089](https://cve.now/CVE-2011-5089.md): Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allow (no CVSS)
- [CVE-2012-0253](https://cve.now/CVE-2012-0253.md): Multiple cross-site scripting (XSS) vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2011-4871](https://cve.now/CVE-2011-4871.md): Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on (no CVSS)
- [CVE-2011-5086](https://cve.now/CVE-2011-5086.md): https50.ocx in IP\*Works! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allo (no CVSS)
- [CVE-2011-5087](https://cve.now/CVE-2011-5087.md): Unspecified vulnerability in AdAstrA TRACE MODE Data Center allows remote attackers to read arbitrary files via unknown vectors, as demonstr (no CVSS)
- [CVE-2012-0135](https://cve.now/CVE-2012-0135.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows remote authenticated users to cause a denial of service v (no CVSS)
- [CVE-2012-0278](https://cve.now/CVE-2012-0278.md): Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2012-0883](https://cve.now/CVE-2012-0883.md): envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows lo (no CVSS)
- [CVE-2012-1799](https://cve.now/CVE-2012-1799.md): The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit (no CVSS)
- [CVE-2012-1800](https://cve.now/CVE-2012-1800.md): Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, (no CVSS)
- [CVE-2012-1801](https://cve.now/CVE-2012-1801.md): Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Serve (no CVSS)
- [CVE-2012-1802](https://cve.now/CVE-2012-1802.md): Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, (no CVSS)
- [CVE-2012-1993](https://cve.now/CVE-2012-1993.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain sensitive informatio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.