# CVEs published 2012-05-23

5 CVEs were published on May 23, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0289](https://cve.now/CVE-2012-0289.md): Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x throu (no CVSS)
- [CVE-2012-0294](https://cve.now/CVE-2012-0294.md): Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU (no CVSS)
- [CVE-2012-0295](https://cve.now/CVE-2012-0295.md): The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 before 12.1 RU1-MP1 allows remote attackers to cond (no CVSS)
- [CVE-2012-2369](https://cve.now/CVE-2012-2369.md): Format string vulnerability in the log\_message\_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3. (no CVSS)
- [CVE-2012-2374](https://cve.now/CVE-2012-2374.md): CRLF injection vulnerability in the tornado.web.RequestHandler.set\_header function in Tornado before 2.2.1 allows remote attackers to inject (no CVSS, tornado)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.