# CVEs published 2012-08-15

52 CVEs were published on August 15, 2012: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2012-2601](https://cve.now/CVE-2012-2601.md): SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2012-4344](https://cve.now/CVE-2012-4344.md): Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via u (no CVSS)
- [CVE-2012-2768](https://cve.now/CVE-2012-2768.md): Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Prac (no CVSS)
- [CVE-2012-2769](https://cve.now/CVE-2012-2769.md): Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Be (no CVSS)
- [CVE-2012-2770](https://cve.now/CVE-2012-2770.md): The Authen::ExternalAuth extension before 0.11 for Best Practical Solutions RT allows remote attackers to obtain a logged-in session via uns (no CVSS)
- [CVE-2012-3434](https://cve.now/CVE-2012-3434.md): Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote att (no CVSS)
- [CVE-2012-4340](https://cve.now/CVE-2012-4340.md): Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2012-4341](https://cve.now/CVE-2012-4341.md): Multiple stack-based buffer overflows in msg\_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2012-4342](https://cve.now/CVE-2012-4342.md): Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2012-4343](https://cve.now/CVE-2012-4343.md): Multiple unspecified vulnerabilities in Gallery 3 before 3.0.4 allow attackers to execute arbitrary PHP code via unknown vectors. (no CVSS)
- [CVE-2012-2570](https://cve.now/CVE-2012-2570.md): Cross-site scripting (XSS) vulnerability in products\_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2012-3435](https://cve.now/CVE-2012-3435.md): SQL injection vulnerability in frontends/php/popup\_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attacke (no CVSS)
- [CVE-2012-4037](https://cve.now/CVE-2012-4037.md): Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2012-1525](https://cve.now/CVE-2012-1525.md): Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to e (no CVSS)
- [CVE-2012-1535](https://cve.now/CVE-2012-1535.md): Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote a (CVSS 7.8, KEV)
- [CVE-2012-2043](https://cve.now/CVE-2012-2043.md): Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2044](https://cve.now/CVE-2012-2044.md): Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2045](https://cve.now/CVE-2012-2045.md): Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2046](https://cve.now/CVE-2012-2046.md): Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2047](https://cve.now/CVE-2012-2047.md): Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2012-2049](https://cve.now/CVE-2012-2049.md): Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to (no CVSS)
- [CVE-2012-2050](https://cve.now/CVE-2012-2050.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbi (no CVSS)
- [CVE-2012-2051](https://cve.now/CVE-2012-2051.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4147](https://cve.now/CVE-2012-4147.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4148](https://cve.now/CVE-2012-4148.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4149](https://cve.now/CVE-2012-4149.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4150](https://cve.now/CVE-2012-4150.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4151](https://cve.now/CVE-2012-4151.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4152](https://cve.now/CVE-2012-4152.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4153](https://cve.now/CVE-2012-4153.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4154](https://cve.now/CVE-2012-4154.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4155](https://cve.now/CVE-2012-4155.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4156](https://cve.now/CVE-2012-4156.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4157](https://cve.now/CVE-2012-4157.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4158](https://cve.now/CVE-2012-4158.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4159](https://cve.now/CVE-2012-4159.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4160](https://cve.now/CVE-2012-4160.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2012-4161](https://cve.now/CVE-2012-4161.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2012-4162](https://cve.now/CVE-2012-4162.md): Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2012-1526](https://cve.now/CVE-2012-1526.md): Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by a (no CVSS)
- [CVE-2012-1850](https://cve.now/CVE-2012-1850.md): The Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3, Windows Server (no CVSS)
- [CVE-2012-1851](https://cve.now/CVE-2012-1851.md): Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Wi (no CVSS)
- [CVE-2012-1852](https://cve.now/CVE-2012-1852.md): Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows (no CVSS)
- [CVE-2012-1853](https://cve.now/CVE-2012-1853.md): Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows (no CVSS)
- [CVE-2012-1856](https://cve.now/CVE-2012-1856.md): The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 200 (CVSS 8.8, KEV)
- [CVE-2012-1888](https://cve.now/CVE-2012-1888.md): Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio (no CVSS)
- [CVE-2012-2521](https://cve.now/CVE-2012-2521.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2012-2522](https://cve.now/CVE-2012-2522.md): Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2012-2523](https://cve.now/CVE-2012-2523.md): Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execut (no CVSS)
- [CVE-2012-2524](https://cve.now/CVE-2012-2524.md): Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup (no CVSS)
- [CVE-2012-2526](https://cve.now/CVE-2012-2526.md): The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remot (no CVSS)
- [CVE-2012-2527](https://cve.now/CVE-2012-2527.md): Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.