# CVEs published 2012-08-22

35 CVEs were published on August 22, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2687](https://cve.now/CVE-2012-2687.md): Multiple cross-site scripting (XSS) vulnerabilities in the make\_variant\_list function in mod\_negotiation.c in the mod\_negotiation module in (no CVSS)
- [CVE-2012-3502](https://cve.now/CVE-2012-3502.md): The proxy functionality in (1) mod\_proxy\_ajp.c in the mod\_proxy\_ajp module and (2) mod\_proxy\_http.c in the mod\_proxy\_http module in the Apac (no CVSS)
- [CVE-2009-5115](https://cve.now/CVE-2009-5115.md): McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote (no CVSS)
- [CVE-2009-5116](https://cve.now/CVE-2009-5116.md): McAfee LinuxShield 1.5.1 and earlier does not properly implement client authentication, which allows remote authenticated users to obtain Ad (no CVSS)
- [CVE-2009-5117](https://cve.now/CVE-2009-5117.md): The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture (no CVSS)
- [CVE-2009-5118](https://cve.now/CVE-2009-5118.md): Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL (no CVSS)
- [CVE-2010-3496](https://cve.now/CVE-2010-3496.md): McAfee VirusScan Enterprise 8.5i and 8.7i does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Ce (no CVSS)
- [CVE-2010-3497](https://cve.now/CVE-2010-3497.md): Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which (no CVSS)
- [CVE-2010-3498](https://cve.now/CVE-2010-3498.md): AVG Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier (no CVSS)
- [CVE-2010-3499](https://cve.now/CVE-2010-3499.md): F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it e (no CVSS)
- [CVE-2010-5143](https://cve.now/CVE-2010-5143.md): McAfee VirusScan Enterprise before 8.8 allows local users to disable the product by leveraging administrative privileges to execute an unspe (no CVSS)
- [CVE-2011-5100](https://cve.now/CVE-2011-5100.md): The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which allows remote attacke (no CVSS)
- [CVE-2011-5101](https://cve.now/CVE-2011-5101.md): The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vector (no CVSS)
- [CVE-2012-0681](https://cve.now/CVE-2012-0681.md): Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, w (no CVSS)
- [CVE-2012-2864](https://cve.now/CVE-2012-2864.md): Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Sam (no CVSS)
- [CVE-2012-4580](https://cve.now/CVE-2012-4580.md): Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Em (no CVSS)
- [CVE-2012-4581](https://cve.now/CVE-2012-4581.md): McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does n (no CVSS)
- [CVE-2012-4582](https://cve.now/CVE-2012-4582.md): McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows (no CVSS)
- [CVE-2012-4583](https://cve.now/CVE-2012-4583.md): McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows (no CVSS)
- [CVE-2012-4584](https://cve.now/CVE-2012-4584.md): McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does n (no CVSS)
- [CVE-2012-4585](https://cve.now/CVE-2012-4585.md): McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows (no CVSS)
- [CVE-2012-4586](https://cve.now/CVE-2012-4586.md): McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, access (no CVSS)
- [CVE-2012-4587](https://cve.now/CVE-2012-4587.md): McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an (no CVSS)
- [CVE-2012-4588](https://cve.now/CVE-2012-4588.md): McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login atte (no CVSS)
- [CVE-2012-4589](https://cve.now/CVE-2012-4589.md): Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified (no CVSS)
- [CVE-2012-4590](https://cve.now/CVE-2012-4590.md): Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 migh (no CVSS)
- [CVE-2012-4591](https://cve.now/CVE-2012-4591.md): About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker pr (no CVSS)
- [CVE-2012-4592](https://cve.now/CVE-2012-4592.md): The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for the ASP.NET session cookie in an https s (no CVSS)
- [CVE-2012-4593](https://cve.now/CVE-2012-4593.md): McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involvin (no CVSS)
- [CVE-2012-4594](https://cve.now/CVE-2012-4594.md): McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sen (no CVSS)
- [CVE-2012-4595](https://cve.now/CVE-2012-4595.md): McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remo (no CVSS)
- [CVE-2012-4596](https://cve.now/CVE-2012-4596.md): Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to bypass intended access (no CVSS)
- [CVE-2012-4597](https://cve.now/CVE-2012-4597.md): Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Emai (no CVSS)
- [CVE-2012-4598](https://cve.now/CVE-2012-4598.md): An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2012-4599](https://cve.now/CVE-2012-4599.md): McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.