# CVEs published 2012-09-11

8 CVEs were published on September 11, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3572](https://cve.now/CVE-2012-3572.md): Open Source Competency Center (OSCC) MyMeeting 3.0.1 and earlier, and MyMesyuarat 09b-1, does not properly verify uploaded documents, which (no CVSS)
- [CVE-2012-4893](https://cve.now/CVE-2012-4893.md): Multiple cross-site request forgery (CSRF) vulnerabilities in file/show.cgi in Webmin 1.590 and earlier allow remote attackers to hijack the (no CVSS)
- [CVE-2012-1892](https://cve.now/CVE-2012-1892.md): Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2012-2536](https://cve.now/CVE-2012-2536.md): Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 al (no CVSS)
- [CVE-2012-2975](https://cve.now/CVE-2012-2975.md): Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 through 11.2.0 HF2 allows remote attack (no CVSS)
- [CVE-2012-2981](https://cve.now/CVE-2012-2981.md): Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type (aka m (no CVSS)
- [CVE-2012-2982](https://cve.now/CVE-2012-2982.md): file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a path (no CVSS)
- [CVE-2012-2983](https://cve.now/CVE-2012-2983.md): file/edit\_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.