# CVEs published 2012-05-02

31 CVEs were published on May 2, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1819](https://cve.now/CVE-2012-1819.md): Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current (no CVSS)
- [CVE-2012-2001](https://cve.now/CVE-2012-2001.md): Cross-site scripting (XSS) vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2012-2002](https://cve.now/CVE-2012-2002.md): Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and co (no CVSS)
- [CVE-2012-2003](https://cve.now/CVE-2012-2003.md): Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote (no CVSS)
- [CVE-2012-2004](https://cve.now/CVE-2012-2004.md): Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redire (no CVSS)
- [CVE-2012-2005](https://cve.now/CVE-2012-2005.md): Cross-site scripting (XSS) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attack (no CVSS)
- [CVE-2012-2006](https://cve.now/CVE-2012-2006.md): Unspecified vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to modify d (no CVSS)
- [CVE-2012-2000](https://cve.now/CVE-2012-2000.md): Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execu (no CVSS)
- [CVE-2011-2578](https://cve.now/CVE-2011-2578.md): Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets o (no CVSS)
- [CVE-2011-2583](https://cve.now/CVE-2011-2583.md): Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demo (no CVSS)
- [CVE-2011-2586](https://cve.now/CVE-2011-2586.md): The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed (no CVSS)
- [CVE-2011-3283](https://cve.now/CVE-2011-3283.md): Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a fragmented GRE packet, (no CVSS)
- [CVE-2011-3285](https://cve.now/CVE-2011-3285.md): CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 throug (no CVSS)
- [CVE-2011-3289](https://cve.now/CVE-2011-3289.md): Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the s (no CVSS)
- [CVE-2011-3293](https://cve.now/CVE-2011-3293.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remo (no CVSS)
- [CVE-2011-3295](https://cve.now/CVE-2011-3295.md): The NETIO and IPV4\_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote at (no CVSS)
- [CVE-2011-3309](https://cve.now/CVE-2011-3309.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode con (no CVSS)
- [CVE-2011-3317](https://cve.now/CVE-2011-3317.md): Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote atta (no CVSS)
- [CVE-2011-4006](https://cve.now/CVE-2011-4006.md): The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote att (no CVSS)
- [CVE-2011-4007](https://cve.now/CVE-2011-4007.md): Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers (no CVSS)
- [CVE-2011-4012](https://cve.now/CVE-2011-4012.md): Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C (PFC3C) is used, does not create a fragment entry during processing of an ICMP (no CVSS)
- [CVE-2011-4014](https://cve.now/CVE-2011-4014.md): The TAC Case Attachment tool in Cisco Wireless Control System (WCS) 7.0 allows remote authenticated users to read arbitrary files under webn (no CVSS)
- [CVE-2011-4015](https://cve.now/CVE-2011-4015.md): Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465, aka Bug (no CVSS)
- [CVE-2011-4016](https://cve.now/CVE-2011-4016.md): The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, all (no CVSS)
- [CVE-2012-0333](https://cve.now/CVE-2012-0333.md): Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which all (no CVSS)
- [CVE-2012-0335](https://cve.now/CVE-2012-0335.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 through 8.4 do not properly perform proxy authentication duri (no CVSS)
- [CVE-2012-0337](https://cve.now/CVE-2012-0337.md): SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQ (no CVSS)
- [CVE-2012-0338](https://cve.now/CVE-2012-0338.md): Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remot (no CVSS)
- [CVE-2012-0339](https://cve.now/CVE-2012-0339.md): Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remot (no CVSS)
- [CVE-2012-0361](https://cve.now/CVE-2012-0361.md): The sccp-protocol component in Cisco IP Communicator (CIPC) 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Commun (no CVSS)
- [CVE-2012-0362](https://cve.now/CVE-2012-0362.md): The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.