# CVEs published 2012-05-03

111 CVEs were published on May 3, 2012: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2011-3620](https://cve.now/CVE-2011-3620.md): Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the (no CVSS)
- [CVE-2012-1328](https://cve.now/CVE-2012-1328.md): Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT (no CVSS)
- [CVE-2012-0562](https://cve.now/CVE-2012-0562.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to (no CVSS)
- [CVE-2012-0564](https://cve.now/CVE-2012-0564.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50 and 8.51 allows remote authe (no CVSS)
- [CVE-2012-0565](https://cve.now/CVE-2012-0565.md): Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote authenti (no CVSS)
- [CVE-2012-0566](https://cve.now/CVE-2012-0566.md): Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attacker (no CVSS)
- [CVE-2012-0567](https://cve.now/CVE-2012-0567.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0571](https://cve.now/CVE-2012-0571.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0573](https://cve.now/CVE-2012-0573.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0575](https://cve.now/CVE-2012-0575.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0576](https://cve.now/CVE-2012-0576.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 6.0.1 and 6.2.0 allows remot (no CVSS)
- [CVE-2012-0577](https://cve.now/CVE-2012-0577.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0579](https://cve.now/CVE-2012-0579.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0580](https://cve.now/CVE-2012-0580.md): Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows (no CVSS)
- [CVE-2012-0581](https://cve.now/CVE-2012-0581.md): Unspecified vulnerability in the Oracle Agile component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attacker (no CVSS)
- [CVE-2012-0582](https://cve.now/CVE-2012-0582.md): Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows re (no CVSS)
- [CVE-2012-0583](https://cve.now/CVE-2012-0583.md): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authentica (no CVSS)
- [CVE-2012-1674](https://cve.now/CVE-2012-1674.md): Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows re (no CVSS)
- [CVE-2012-1676](https://cve.now/CVE-2012-1676.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, (no CVSS)
- [CVE-2012-1679](https://cve.now/CVE-2012-1679.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, (no CVSS)
- [CVE-2012-1681](https://cve.now/CVE-2012-1681.md): Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Ke (no CVSS)
- [CVE-2012-1683](https://cve.now/CVE-2012-1683.md): Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability v (no CVSS)
- [CVE-2012-1684](https://cve.now/CVE-2012-1684.md): Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability v (no CVSS)
- [CVE-2012-1688](https://cve.now/CVE-2012-1688.md): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authentica (no CVSS)
- [CVE-2012-1690](https://cve.now/CVE-2012-1690.md): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authentica (no CVSS)
- [CVE-2012-1691](https://cve.now/CVE-2012-1691.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vec (no CVSS)
- [CVE-2012-1692](https://cve.now/CVE-2012-1692.md): Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability, related to SCTP. (no CVSS)
- [CVE-2012-1693](https://cve.now/CVE-2012-1693.md): Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 allows remote attackers to affect availability, related to XS (no CVSS)
- [CVE-2012-1694](https://cve.now/CVE-2012-1694.md): Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality and integrity, related to libsasl. (no CVSS)
- [CVE-2012-1695](https://cve.now/CVE-2012-1695.md): Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and ear (CVSS 6.8)
- [CVE-2012-1696](https://cve.now/CVE-2012-1696.md): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2012-1697](https://cve.now/CVE-2012-1697.md): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.21 and earlier allows remote authenticated users to affect avail (no CVSS)
- [CVE-2012-1698](https://cve.now/CVE-2012-1698.md): Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD. (no CVSS)
- [CVE-2012-1703](https://cve.now/CVE-2012-1703.md): Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authentica (no CVSS)
- [CVE-2012-1704](https://cve.now/CVE-2012-1704.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, (no CVSS)
- [CVE-2012-1706](https://cve.now/CVE-2012-1706.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, (no CVSS)
- [CVE-2012-1707](https://cve.now/CVE-2012-1707.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, (no CVSS)
- [CVE-2012-1708](https://cve.now/CVE-2012-1708.md): Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integ (no CVSS)
- [CVE-2012-1709](https://cve.now/CVE-2012-1709.md): Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers t (no CVSS)
- [CVE-2012-1710](https://cve.now/CVE-2012-1710.md): Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers t (CVSS 9.8, KEV)
- [CVE-2012-0376](https://cve.now/CVE-2012-0376.md): The voice-sipstack component in Cisco Unified Communications Manager (CUCM) 8.5 allows remote attackers to cause a denial of service (core d (no CVSS)
- [CVE-2012-0378](https://cve.now/CVE-2012-0378.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allow remote attackers to cause a denial of servi (no CVSS)
- [CVE-2012-1324](https://cve.now/CVE-2012-1324.md): Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a d (no CVSS)
- [CVE-2012-1327](https://cve.now/CVE-2012-1327.md): dot11t/t\_if\_dot11\_hal\_ath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service (assertion failure (no CVSS)
- [CVE-2012-1936](https://cve.now/CVE-2012-1936.md): The wp\_create\_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a (no CVSS)
- [CVE-2012-0535](https://cve.now/CVE-2012-0535.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote atta (no CVSS)
- [CVE-2012-0536](https://cve.now/CVE-2012-0536.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 through Bundle #26 allows remote aut (no CVSS)
- [CVE-2012-0537](https://cve.now/CVE-2012-0537.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3 allows remote attackers to af (no CVSS)
- [CVE-2012-0538](https://cve.now/CVE-2012-0538.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remot (no CVSS)
- [CVE-2012-0539](https://cve.now/CVE-2012-0539.md): Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via u (no CVSS)
- [CVE-2012-0541](https://cve.now/CVE-2012-0541.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, (no CVSS)
- [CVE-2012-0542](https://cve.now/CVE-2012-0542.md): Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 al (no CVSS)
- [CVE-2012-0543](https://cve.now/CVE-2012-0543.md): Unspecified vulnerability in the BI Publisher (formerly XML Publisher) component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allow (no CVSS)
- [CVE-2012-0544](https://cve.now/CVE-2012-0544.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0545](https://cve.now/CVE-2012-0545.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0546](https://cve.now/CVE-2012-0546.md): Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and (no CVSS)
- [CVE-2012-0548](https://cve.now/CVE-2012-0548.md): Unspecified vulnerability in Oracle SPARC Enterprise M Series Servers XCP 1110 and earlier allows local users to affect confidentiality, rel (no CVSS)
- [CVE-2012-0549](https://cve.now/CVE-2012-0549.md): Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to aff (no CVSS)
- [CVE-2012-0550](https://cve.now/CVE-2012-0550.md): Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows (no CVSS)
- [CVE-2012-0551](https://cve.now/CVE-2012-0551.md): Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and th (no CVSS)
- [CVE-2012-0552](https://cve.now/CVE-2012-0552.md): Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11 (no CVSS)
- [CVE-2012-0554](https://cve.now/CVE-2012-0554.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers (no CVSS)
- [CVE-2012-0555](https://cve.now/CVE-2012-0555.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers (no CVSS)
- [CVE-2012-0556](https://cve.now/CVE-2012-0556.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers (no CVSS)
- [CVE-2012-0557](https://cve.now/CVE-2012-0557.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows remote attackers (no CVSS)
- [CVE-2012-0558](https://cve.now/CVE-2012-0558.md): Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.2.1, 8. (no CVSS)
- [CVE-2012-0559](https://cve.now/CVE-2012-0559.md): Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated u (no CVSS)
- [CVE-2012-0560](https://cve.now/CVE-2012-0560.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remot (no CVSS)
- [CVE-2012-0561](https://cve.now/CVE-2012-0561.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remot (no CVSS)
- [CVE-2012-0208](https://cve.now/CVE-2012-0208.md): Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows remote authenticated users to (no CVSS)
- [CVE-2012-0509](https://cve.now/CVE-2012-0509.md): Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2 and 5.3.0 through 5.3. (no CVSS)
- [CVE-2012-0510](https://cve.now/CVE-2012-0510.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7 allows remote att (no CVSS)
- [CVE-2012-0511](https://cve.now/CVE-2012-0511.md): Unspecified vulnerability in the OCI component in Oracle Database Server 10.2.0.3, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect (no CVSS)
- [CVE-2012-0512](https://cve.now/CVE-2012-0512.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7 and 11.2.0.2 and Oracle Enter (no CVSS)
- [CVE-2012-0513](https://cve.now/CVE-2012-0513.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote atta (no CVSS)
- [CVE-2012-0514](https://cve.now/CVE-2012-0514.md): Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to (no CVSS)
- [CVE-2012-0515](https://cve.now/CVE-2012-0515.md): Unspecified vulnerability in the Identity Manager Connector component in Oracle Fusion Middleware 9.1.0.4 allows remote authenticated users (no CVSS)
- [CVE-2012-0516](https://cve.now/CVE-2012-0516.md): Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect conf (no CVSS)
- [CVE-2012-0517](https://cve.now/CVE-2012-0517.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to (no CVSS)
- [CVE-2012-0519](https://cve.now/CVE-2012-0519.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.2, when running on Windows, allows remote authenticat (no CVSS)
- [CVE-2012-0520](https://cve.now/CVE-2012-0520.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7 (no CVSS)
- [CVE-2012-0521](https://cve.now/CVE-2012-0521.md): Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 Bundle #9 allows remote authenticated (no CVSS)
- [CVE-2012-0522](https://cve.now/CVE-2012-0522.md): Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrit (no CVSS)
- [CVE-2012-0523](https://cve.now/CVE-2012-0523.md): Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows local users to affect confiden (no CVSS)
- [CVE-2012-0524](https://cve.now/CVE-2012-0524.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows local (no CVSS)
- [CVE-2012-0525](https://cve.now/CVE-2012-0525.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and (no CVSS)
- [CVE-2012-0526](https://cve.now/CVE-2012-0526.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7 (no CVSS)
- [CVE-2012-0527](https://cve.now/CVE-2012-0527.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7 (no CVSS)
- [CVE-2012-0528](https://cve.now/CVE-2012-0528.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1 (no CVSS)
- [CVE-2012-0529](https://cve.now/CVE-2012-0529.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51 allows remote authenticated (no CVSS)
- [CVE-2012-0530](https://cve.now/CVE-2012-0530.md): Unspecified vulnerability in the PeopleSoft Enterprise SCM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated u (no CVSS)
- [CVE-2012-0531](https://cve.now/CVE-2012-0531.md): Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Products 9.1 allows remote authenticated users (no CVSS)
- [CVE-2012-0532](https://cve.now/CVE-2012-0532.md): Unspecified vulnerability in the Identity Manager component in Oracle Fusion Middleware 11.1.1.3 and 11.1.1.5 allows remote authenticated us (no CVSS)
- [CVE-2012-0533](https://cve.now/CVE-2012-0533.md): Unspecified vulnerability in the PeopleSoft Enterprise FCSM component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated (no CVSS)
- [CVE-2012-0534](https://cve.now/CVE-2012-0534.md): Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0 (no CVSS)
- [CVE-2011-4019](https://cve.now/CVE-2011-4019.md): Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager (CUCM) 7.x, allows remote attackers to cause a (no CVSS)
- [CVE-2011-4022](https://cve.now/CVE-2011-4022.md): The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle exhausti (no CVSS)
- [CVE-2011-4023](https://cve.now/CVE-2011-4023.md): Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumptio (no CVSS)
- [CVE-2011-4231](https://cve.now/CVE-2011-4231.md): Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to (no CVSS)
- [CVE-2011-4232](https://cve.now/CVE-2011-4232.md): The web server in Cisco Unified MeetingPlace 6.1 and 8.5 produces different responses for directory queries depending on whether the directo (no CVSS)
- [CVE-2011-4237](https://cve.now/CVE-2011-4237.md): CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and ot (no CVSS)
- [CVE-2012-0729](https://cve.now/CVE-2012-0729.md): Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to ex (no CVSS)
- [CVE-2012-0730](https://cve.now/CVE-2012-0730.md): Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attack (no CVSS)
- [CVE-2012-0731](https://cve.now/CVE-2012-0731.md): IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not prevent service-account impersonation, which allows remote authenticated (no CVSS)
- [CVE-2012-0732](https://cve.now/CVE-2012-0732.md): The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2012-0733](https://cve.now/CVE-2012-0733.md): IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated user (no CVSS)
- [CVE-2012-0734](https://cve.now/CVE-2012-0734.md): IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain (no CVSS)
- [CVE-2012-0735](https://cve.now/CVE-2012-0735.md): IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly scan file: URLs, which allows man-in-the-middle attackers to ob (no CVSS)
- [CVE-2012-0736](https://cve.now/CVE-2012-0736.md): IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly create scan jobs, which allows remote attackers to execute arbi (no CVSS)
- [CVE-2012-0737](https://cve.now/CVE-2012-0737.md): Cross-site scripting (XSS) vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to (no CVSS)
- [CVE-2012-1190](https://cve.now/CVE-2012-1190.md): Cross-site scripting (XSS) vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.