# CVEs published 2012-05-22

7 CVEs were published on May 22, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1990](https://cve.now/CVE-2012-1990.md): Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers (no CVSS)
- [CVE-2012-2759](https://cve.now/CVE-2012-2759.md): Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordP (no CVSS)
- [CVE-2012-2562](https://cve.now/CVE-2012-2562.md): The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to (no CVSS)
- [CVE-2012-2567](https://cve.now/CVE-2012-2567.md): The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitiv (no CVSS)
- [CVE-2012-2926](https://cve.now/CVE-2012-2926.md): Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 befor (no CVSS)
- [CVE-2012-2927](https://cve.now/CVE-2012-2927.md): The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the ca (no CVSS)
- [CVE-2012-2928](https://cve.now/CVE-2012-2928.md): The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.