# CVEs published 2012-07-26

16 CVEs were published on July 26, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2657](https://cve.now/CVE-2011-2657.md): Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminS (no CVSS)
- [CVE-2011-2658](https://cve.now/CVE-2011-2658.md): The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to (no CVSS)
- [CVE-2011-3174](https://cve.now/CVE-2011-3174.md): Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZE (no CVSS)
- [CVE-2012-3884](https://cve.now/CVE-2012-3884.md): AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote att (no CVSS)
- [CVE-2012-3885](https://cve.now/CVE-2012-3885.md): The default configuration of AirDroid 1.0.4 beta uses a four-character alphanumeric password, which makes it easier for remote attackers to (no CVSS)
- [CVE-2012-3886](https://cve.now/CVE-2012-3886.md): AirDroid 1.0.4 beta uses the MD5 algorithm for values in the checklogin key parameter and 7bb cookie, which makes it easier for remote attac (no CVSS)
- [CVE-2012-3887](https://cve.now/CVE-2012-3887.md): AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which (no CVSS)
- [CVE-2012-3888](https://cve.now/CVE-2012-3888.md): The login implementation in AirDroid 1.0.4 beta allows remote attackers to bypass a multiple-login protection mechanism by modifying a pass (no CVSS)
- [CVE-2011-2502](https://cve.now/CVE-2011-2502.md): runtime/staprun/staprun\_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not properly validate modules when a mo (no CVSS)
- [CVE-2011-2503](https://cve.now/CVE-2011-2503.md): The insert\_module function in runtime/staprun/staprun\_funcs.c in the systemtap runtime tool (staprun) in SystemTap before 1.6 does not prope (no CVSS)
- [CVE-2011-4963](https://cve.now/CVE-2011-4963.md): nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted (no CVSS)
- [CVE-2012-3698](https://cve.now/CVE-2012-3698.md): Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, whic (no CVSS)
- [CVE-2012-4043](https://cve.now/CVE-2012-4043.md): Cross-site scripting (XSS) vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, an (no CVSS)
- [CVE-2012-4068](https://cve.now/CVE-2012-4068.md): Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote atta (no CVSS)
- [CVE-2012-3005](https://cve.now/CVE-2012-3005.md): Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware In (no CVSS)
- [CVE-2012-3015](https://cve.now/CVE-2012-3015.md): Untrusted search path vulnerability in Siemens SIMATIC STEP7 before 5.5 SP1, as used in SIMATIC PCS7 7.1 SP3 and earlier and other products, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.