# CVEs published 2012-07-05

20 CVEs were published on July 5, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2018](https://cve.now/CVE-2012-2018.md): Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2012-3585](https://cve.now/CVE-2012-3585.md): Heap-based buffer overflow in jpeg\_ls.dll in the Jpeg\_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows rem (no CVSS)
- [CVE-2012-0300](https://cve.now/CVE-2012-0300.md): Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the listening port, which a (no CVSS)
- [CVE-2012-0301](https://cve.now/CVE-2012-0301.md): Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hijack web sessions vi (no CVSS)
- [CVE-2012-0302](https://cve.now/CVE-2012-0302.md): Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to inject arbit (no CVSS)
- [CVE-2012-0303](https://cve.now/CVE-2012-0303.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 allow remote attacker (no CVSS)
- [CVE-2012-2640](https://cve.now/CVE-2012-2640.md): The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via (no CVSS)
- [CVE-2012-2641](https://cve.now/CVE-2012-2641.md): Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggeri (no CVSS)
- [CVE-2012-0410](https://cve.now/CVE-2012-0410.md): Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary files via the User. (no CVSS)
- [CVE-2012-2143](https://cve.now/CVE-2012-2143.md): The crypt\_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not proc (no CVSS)
- [CVE-2012-2281](https://cve.now/CVE-2012-2281.md): EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which (no CVSS)
- [CVE-2012-1830](https://cve.now/CVE-2012-1830.md): Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 5 (no CVSS)
- [CVE-2012-1831](https://cve.now/CVE-2012-1831.md): Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 55 (no CVSS)
- [CVE-2012-1832](https://cve.now/CVE-2012-1832.md): WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted p (no CVSS)
- [CVE-2012-2515](https://cve.now/CVE-2012-2515.md): Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HT (no CVSS)
- [CVE-2012-2516](https://cve.now/CVE-2012-2516.md): An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Platforms Proficy Hist (no CVSS)
- [CVE-2012-2559](https://cve.now/CVE-2012-2559.md): WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a cr (no CVSS)
- [CVE-2012-2560](https://cve.now/CVE-2012-2560.md): Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to (no CVSS)
- [CVE-2012-3007](https://cve.now/CVE-2012-3007.md): Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as us (no CVSS)
- [CVE-2012-3847](https://cve.now/CVE-2012-3847.md): slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remote attackers to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.