# CVEs published 2012-05-01 9 CVEs were published on May 1, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-0279](https://cve.now/CVE-2012-0279.md): Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\\Quest Shared directory, which (no CVSS) - [CVE-2012-0878](https://cve.now/CVE-2012-0878.md): Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attac (no CVSS, pastescript ยท paste) - [CVE-2012-2162](https://cve.now/CVE-2012-2162.md): The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the (no CVSS) - [CVE-2012-2217](https://cve.now/CVE-2012-2217.md): The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D be (no CVSS) - [CVE-2011-3078](https://cve.now/CVE-2011-3078.md): Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have uns (no CVSS) - [CVE-2011-3079](https://cve.now/CVE-2011-3079.md): The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other (no CVSS) - [CVE-2011-3080](https://cve.now/CVE-2011-3080.md): Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass inte (no CVSS) - [CVE-2011-3081](https://cve.now/CVE-2011-3081.md): Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have uns (no CVSS) - [CVE-2012-1521](https://cve.now/CVE-2012-1521.md): Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-05-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.