# CVEs published 2012-09-06

80 CVEs were published on September 6, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1467](https://cve.now/CVE-2012-1467.md): Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote auth (no CVSS)
- [CVE-2012-1468](https://cve.now/CVE-2012-1468.md): Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to (no CVSS)
- [CVE-2012-1469](https://cve.now/CVE-2012-1469.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated use (no CVSS)
- [CVE-2012-1611](https://cve.now/CVE-2012-1611.md): Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" informa (no CVSS)
- [CVE-2012-1612](https://cve.now/CVE-2012-1612.md): Cross-site scripting (XSS) vulnerability in the update manager in Joomla! 2.5.x before 2.5.4 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-4871](https://cve.now/CVE-2012-4871.md): Cross-site scripting (XSS) vulnerability in service/graph\_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote a (no CVSS)
- [CVE-2012-4872](https://cve.now/CVE-2012-4872.md): Cross-site scripting (XSS) vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-4873](https://cve.now/CVE-2012-4873.md): Cross-site scripting (XSS) vulnerability in the file\_download function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2012-4874](https://cve.now/CVE-2012-4874.md): Unspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has unknown impact and attack vectors related (no CVSS)
- [CVE-2012-4875](https://cve.now/CVE-2012-4875.md): Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote a (no CVSS)
- [CVE-2012-4876](https://cve.now/CVE-2012-4876.md): Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attack (no CVSS)
- [CVE-2012-4877](https://cve.now/CVE-2012-4877.md): Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remote attackers to hija (no CVSS)
- [CVE-2012-4878](https://cve.now/CVE-2012-4878.md): Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files (no CVSS)
- [CVE-2006-7247](https://cve.now/CVE-2006-7247.md): SQL injection vulnerability in the Weblinks (com\_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2012-0819](https://cve.now/CVE-2012-0819.md): Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vector (no CVSS)
- [CVE-2012-0820](https://cve.now/CVE-2012-0820.md): Cross-site scripting (XSS) vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2012-0821](https://cve.now/CVE-2012-0821.md): Unspecified vulnerability in Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vector (no CVSS)
- [CVE-2012-0822](https://cve.now/CVE-2012-0822.md): Cross-site scripting (XSS) vulnerability in Joomla! 1.6 and 1.7.x before 1.7.4 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2012-0835](https://cve.now/CVE-2012-0835.md): Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain sensitive information via unknown (no CVSS)
- [CVE-2012-0836](https://cve.now/CVE-2012-0836.md): Unspecified vulnerability in Joomla! 1.7.x before 1.7.5 allows attackers to read the error log via unknown vectors. (no CVSS)
- [CVE-2012-0837](https://cve.now/CVE-2012-0837.md): Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "admin (no CVSS)
- [CVE-2012-1107](https://cve.now/CVE-2012-1107.md): The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of servi (no CVSS)
- [CVE-2012-1108](https://cve.now/CVE-2012-1108.md): The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and earlier allows remote attackers to cause a denial of service (crash) via a craft (no CVSS)
- [CVE-2012-1110](https://cve.now/CVE-2012-1110.md): Multiple cross-site scripting (XSS) vulnerabilities in Etano 1.22 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2012-1112](https://cve.now/CVE-2012-1112.md): Directory traversal vulnerability in Open-Realty CMS 2.5.8 and earlier allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2012-1584](https://cve.now/CVE-2012-1584.md): Integer overflow in the mid function in toolkit/tbytevector.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a deni (no CVSS)
- [CVE-2012-2069](https://cve.now/CVE-2012-2069.md): Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows r (no CVSS)
- [CVE-2012-2740](https://cve.now/CVE-2012-2740.md): SQL injection vulnerability in public\_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2012-2741](https://cve.now/CVE-2012-2741.md): Cross-site scripting (XSS) vulnerability in public\_html/lists/admin/ in phpList before 2.10.18 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2012-4864](https://cve.now/CVE-2012-4864.md): Oreans WinLicense 2.1.8.0 allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary (no CVSS)
- [CVE-2012-4865](https://cve.now/CVE-2012-4865.md): Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file. (no CVSS)
- [CVE-2012-4866](https://cve.now/CVE-2012-4866.md): Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a T (no CVSS)
- [CVE-2012-4867](https://cve.now/CVE-2012-4867.md): Directory traversal vulnerability in modules/com\_vtiger\_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote attackers to read arbi (no CVSS)
- [CVE-2012-4868](https://cve.now/CVE-2012-4868.md): SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2012-4869](https://cve.now/CVE-2012-4869.md): The callme\_startcall function in recordings/misc/callme\_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitr (no CVSS)
- [CVE-2012-4870](https://cve.now/CVE-2012-4870.md): Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.9 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2010-5195](https://cve.now/CVE-2010-5195.md): Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils9.dll file in the cur (no CVSS)
- [CVE-2010-5196](https://cve.now/CVE-2010-5196.md): Untrusted search path vulnerability in KeePass Password Safe before 2.13 allows local users to gain privileges via a Trojan horse DwmApi.dll (no CVSS)
- [CVE-2010-5197](https://cve.now/CVE-2010-5197.md): Untrusted search path vulnerability in Pixia 4.70j allows local users to gain privileges via a Trojan horse wintab32.dll file in the current (no CVSS)
- [CVE-2010-5198](https://cve.now/CVE-2010-5198.md): Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudt (no CVSS)
- [CVE-2010-5199](https://cve.now/CVE-2010-5199.md): Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll fil (no CVSS)
- [CVE-2010-5200](https://cve.now/CVE-2010-5200.md): Untrusted search path vulnerability in KeePass Password Safe before 1.18 allows local users to gain privileges via a Trojan horse DLL in the (no CVSS)
- [CVE-2010-5201](https://cve.now/CVE-2010-5201.md): Untrusted search path vulnerability in MAGIX Samplitude Producer 11 allows local users to gain privileges via a Trojan horse PlayRIplA6.dll (no CVSS)
- [CVE-2010-5202](https://cve.now/CVE-2010-5202.md): Untrusted search path vulnerability in JetAudio 8.0.7.1000 Basic allows local users to gain privileges via a Trojan horse WNASPI32.DLL file (no CVSS)
- [CVE-2010-5203](https://cve.now/CVE-2010-5203.md): Multiple untrusted search path vulnerabilities in NCP Secure Enterprise Client before 9.21 Build 68, Secure Entry Client before 9.23 Build 1 (no CVSS)
- [CVE-2010-5204](https://cve.now/CVE-2010-5204.md): Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan h (no CVSS)
- [CVE-2010-5205](https://cve.now/CVE-2010-5205.md): Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse (1) java (no CVSS)
- [CVE-2010-5206](https://cve.now/CVE-2010-5206.md): Multiple untrusted search path vulnerabilities in e-press ONE Office E-NoteTaker and E-Zip allow local users to gain privileges via a Trojan (no CVSS)
- [CVE-2010-5207](https://cve.now/CVE-2010-5207.md): Multiple untrusted search path vulnerabilities in CelFrame Office 2008 Standard Edition allow local users to gain privileges via a Trojan ho (no CVSS)
- [CVE-2010-5208](https://cve.now/CVE-2010-5208.md): Multiple untrusted search path vulnerabilities in the (1) Presentation, (2) Writer, and (3) Spreadsheets components in Kingsoft Office 2010 (no CVSS)
- [CVE-2010-5209](https://cve.now/CVE-2010-5209.md): Multiple untrusted search path vulnerabilities in Nuance PDF Reader 6.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.d (no CVSS)
- [CVE-2010-5210](https://cve.now/CVE-2010-5210.md): Untrusted search path vulnerability in Sorax Reader 2.0.3129.70 allows local users to gain privileges via a Trojan horse dwmapi.dll file in (no CVSS)
- [CVE-2010-5211](https://cve.now/CVE-2010-5211.md): Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the curr (no CVSS)
- [CVE-2010-5212](https://cve.now/CVE-2010-5212.md): Untrusted search path vulnerability in Adobe LiveCycle Designer ES2 9.0.0.20091029.1.612548 allows local users to gain privileges via a Troj (no CVSS)
- [CVE-2010-5213](https://cve.now/CVE-2010-5213.md): Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse (no CVSS)
- [CVE-2010-5214](https://cve.now/CVE-2010-5214.md): Untrusted search path vulnerability in Fotobook Editor 5.0 2.8.0.1 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll fil (no CVSS)
- [CVE-2010-5215](https://cve.now/CVE-2010-5215.md): Multiple untrusted search path vulnerabilities in SWiSH Max3 3.0 2009.11.30 allow local users to gain privileges via a Trojan horse (1) dwma (no CVSS)
- [CVE-2010-5216](https://cve.now/CVE-2010-5216.md): Untrusted search path vulnerability in LINGO 11.0.1.6 and 12.0.2.20 allows local users to gain privileges via a Trojan horse myuser.dll file (no CVSS)
- [CVE-2010-5217](https://cve.now/CVE-2010-5217.md): Multiple untrusted search path vulnerabilities in TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600 allow local users to gain privileges via (no CVSS)
- [CVE-2010-5218](https://cve.now/CVE-2010-5218.md): Untrusted search path vulnerability in Dupehunter 9.0.0.3911 allows local users to gain privileges via a Trojan horse Fwpuclnt.dll file in t (no CVSS)
- [CVE-2010-5219](https://cve.now/CVE-2010-5219.md): Untrusted search path vulnerability in SmartFTP 4.0.1140.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the c (no CVSS)
- [CVE-2010-5220](https://cve.now/CVE-2010-5220.md): Untrusted search path vulnerability in MEO Encryption Software 2.02 allows local users to gain privileges via a Trojan horse dwmapi.dll file (no CVSS)
- [CVE-2010-5221](https://cve.now/CVE-2010-5221.md): Untrusted search path vulnerability in STDU Explorer 1.0.201 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the (no CVSS)
- [CVE-2010-5222](https://cve.now/CVE-2010-5222.md): Untrusted search path vulnerability in Ease Jukebox 1.40 allows local users to gain privileges via a Trojan horse wmaudsdk.dll file in the c (no CVSS)
- [CVE-2010-5223](https://cve.now/CVE-2010-5223.md): Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse (1 (no CVSS)
- [CVE-2010-5224](https://cve.now/CVE-2010-5224.md): Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll (no CVSS)
- [CVE-2010-5225](https://cve.now/CVE-2010-5225.md): Untrusted search path vulnerability in Babylon 8.1.0 r16 allows local users to gain privileges via a Trojan horse BESExtension.dll file in t (no CVSS)
- [CVE-2011-5151](https://cve.now/CVE-2011-5151.md): Untrusted search path vulnerability in ACDSee Picture Frame Manager 1.0 Build 81 allows local users to gain privileges via a Trojan horse Sh (no CVSS)
- [CVE-2011-5152](https://cve.now/CVE-2011-5152.md): Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan h (no CVSS)
- [CVE-2011-5153](https://cve.now/CVE-2011-5153.md): Untrusted search path vulnerability in FotoSlate 4.0 Build 146 allows local users to gain privileges via a Trojan horse dwmapi.dll file in t (no CVSS)
- [CVE-2011-5154](https://cve.now/CVE-2011-5154.md): Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gai (no CVSS)
- [CVE-2011-5155](https://cve.now/CVE-2011-5155.md): Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll fil (no CVSS)
- [CVE-2011-5156](https://cve.now/CVE-2011-5156.md): Untrusted search path vulnerability in Effective File Search 6.7 allows local users to gain privileges via a Trojan horse ztvunrar36.dll fil (no CVSS)
- [CVE-2011-5157](https://cve.now/CVE-2011-5157.md): Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in (no CVSS)
- [CVE-2012-4754](https://cve.now/CVE-2012-4754.md): Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp (no CVSS)
- [CVE-2012-4755](https://cve.now/CVE-2012-4755.md): Untrusted search path vulnerability in SciTools Understand before 2.6 build 600 allows local users to gain privileges via a Trojan horse win (no CVSS)
- [CVE-2012-4756](https://cve.now/CVE-2012-4756.md): Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse (1) (no CVSS)
- [CVE-2012-4757](https://cve.now/CVE-2012-4757.md): Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users to gain privileges via a Trojan ho (no CVSS)
- [CVE-2012-4758](https://cve.now/CVE-2012-4758.md): Multiple untrusted search path vulnerabilities in CyberLink PowerProducer 5.5.3.2325 allow local users to gain privileges via a Trojan horse (no CVSS)
- [CVE-2012-4759](https://cve.now/CVE-2012-4759.md): Untrusted search path vulnerability in facebook\_plugin.fpi in the Facebook plug-in in Foxit Reader 5.3.1.0606 allows local users to gain pri (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.