# CVEs published 2012-05-15 9 CVEs were published on May 15, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-1246](https://cve.now/CVE-2012-1246.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier might allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2012-1247](https://cve.now/CVE-2012-1247.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB MART 1.7 and earlier, when Internet Explorer is used, allows remote attackers to in (no CVSS) - [CVE-2012-1248](https://cve.now/CVE-2012-1248.md): app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remot (no CVSS) - [CVE-2012-2511](https://cve.now/CVE-2012-2511.md): The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allo (no CVSS) - [CVE-2012-2512](https://cve.now/CVE-2012-2512.md): The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 al (no CVSS) - [CVE-2012-2513](https://cve.now/CVE-2012-2513.md): The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows re (no CVSS) - [CVE-2012-2514](https://cve.now/CVE-2012-2514.md): The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 al (no CVSS) - [CVE-2012-2611](https://cve.now/CVE-2012-2611.md): The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeav (no CVSS) - [CVE-2012-2612](https://cve.now/CVE-2012-2612.md): The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-05-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.