# CVEs published 2012-08-17 20 CVEs were published on August 17, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-0744](https://cve.now/CVE-2012-0744.md): IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information vi (no CVSS) - [CVE-2012-2164](https://cve.now/CVE-2012-2164.md): The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended a (no CVSS) - [CVE-2012-2165](https://cve.now/CVE-2012-2165.md): IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated (no CVSS) - [CVE-2012-2168](https://cve.now/CVE-2012-2168.md): IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace inform (no CVSS) - [CVE-2012-2169](https://cve.now/CVE-2012-2169.md): Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 (no CVSS) - [CVE-2012-2205](https://cve.now/CVE-2012-2205.md): Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated (no CVSS) - [CVE-2012-3296](https://cve.now/CVE-2012-3296.md): Cross-site scripting (XSS) vulnerability in the Help link in the login panel in IBM Power Hardware Management Console (HMC) 7R7.1.0 before S (no CVSS) - [CVE-2012-4006](https://cve.now/CVE-2012-4006.md): The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura app (no CVSS) - [CVE-2012-4007](https://cve.now/CVE-2012-4007.md): The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a c (no CVSS) - [CVE-2012-2206](https://cve.now/CVE-2012-2206.md): The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arb (no CVSS) - [CVE-2012-3294](https://cve.now/CVE-2012-3294.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and (no CVSS) - [CVE-2012-3308](https://cve.now/CVE-2012-3308.md): Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2009-5026](https://cve.now/CVE-2009-5026.md): The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which t (no CVSS) - [CVE-2012-1585](https://cve.now/CVE-2012-1585.md): OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk cons (no CVSS, nova) - [CVE-2012-1597](https://cve.now/CVE-2012-1597.md): Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 a (no CVSS) - [CVE-2012-1908](https://cve.now/CVE-2012-1908.md): Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknow (no CVSS) - [CVE-2012-2102](https://cve.now/CVE-2012-2102.md): MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysq (no CVSS) - [CVE-2012-2749](https://cve.now/CVE-2012-2749.md): MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors (no CVSS) - [CVE-2012-2750](https://cve.now/CVE-2012-2750.md): Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. (no CVSS) - [CVE-2012-3381](https://cve.now/CVE-2012-3381.md): sfcb in sblim-sfcb places a zero-length directory name in the LD\_LIBRARY\_PATH, which allows local users to gain privileges via a Trojan hors (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-08-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.