# CVEs published 2012-09-25 30 CVEs were published on September 25, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2011-4623](https://cve.now/CVE-2011-4623.md): Integer overflow in the rsCStrExtendBuf function in runtime/stringbuf.c in the imfile module in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, (no CVSS) - [CVE-2012-0869](https://cve.now/CVE-2012-0869.md): Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F\*EX, aka fex) before 20120215 allows remote attackers to inje (no CVSS) - [CVE-2012-0973](https://cve.now/CVE-2012-0973.md): Multiple SQL injection vulnerabilities in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the sCategory pa (no CVSS) - [CVE-2012-0974](https://cve.now/CVE-2012-0974.md): Multiple cross-site scripting (XSS) vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 (no CVSS) - [CVE-2012-1103](https://cve.now/CVE-2012-1103.md): emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files (no CVSS) - [CVE-2012-1293](https://cve.now/CVE-2012-1293.md): Multiple cross-site scripting (XSS) vulnerabilities in fup in Frams' Fast File EXchange (F\*EX, aka fex) before 20111129-2 allow remote attac (no CVSS) - [CVE-2012-1646](https://cve.now/CVE-2012-1646.md): Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authen (no CVSS) - [CVE-2012-0209](https://cve.now/CVE-2012-0209.md): Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2 (no CVSS) - [CVE-2012-5159](https://cve.now/CVE-2012-5159.md): phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced (no CVSS) - [CVE-2012-2187](https://cve.now/CVE-2012-2187.md): IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 1.13 and earlier generates weak RSA keys, which makes it (no CVSS) - [CVE-2012-2199](https://cve.now/CVE-2012-2199.md): The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows (no CVSS) - [CVE-2012-3298](https://cve.now/CVE-2012-3298.md): Unspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature Pack 4 allows remote attackers to obtain sens (no CVSS) - [CVE-2012-3300](https://cve.now/CVE-2012-3300.md): IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a (no CVSS) - [CVE-2012-3304](https://cve.now/CVE-2012-3304.md): The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 b (no CVSS) - [CVE-2012-3305](https://cve.now/CVE-2012-3305.md): Directory traversal vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, an (no CVSS) - [CVE-2012-3306](https://cve.now/CVE-2012-3306.md): IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-doma (no CVSS) - [CVE-2012-3311](https://cve.now/CVE-2012-3311.md): IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in cert (no CVSS) - [CVE-2012-3324](https://cve.now/CVE-2012-3324.md): Directory traversal vulnerability in the UTL\_FILE module in IBM DB2 and DB2 Connect 10.1 before FP1 on Windows allows remote authenticated u (no CVSS) - [CVE-2012-3334](https://cve.now/CVE-2012-3334.md): Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authentic (no CVSS) - [CVE-2012-2287](https://cve.now/CVE-2012-2287.md): The authentication functionality in EMC RSA Authentication Agent 7.1 and RSA Authentication Client 3.5 on Windows XP and Windows Server 2003 (no CVSS) - [CVE-2012-3011](https://cve.now/CVE-2012-3011.md): Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and earlier allows remote attackers to read arbitrary files (no CVSS) - [CVE-2012-3037](https://cve.now/CVE-2012-3037.md): The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, (no CVSS) - [CVE-2012-3259](https://cve.now/CVE-2012-3259.md): Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow (no CVSS) - [CVE-2012-3260](https://cve.now/CVE-2012-3260.md): Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow (no CVSS) - [CVE-2012-3261](https://cve.now/CVE-2012-3261.md): Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow (no CVSS) - [CVE-2012-3262](https://cve.now/CVE-2012-3262.md): Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow (no CVSS) - [CVE-2012-3263](https://cve.now/CVE-2012-3263.md): Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow (no CVSS) - [CVE-2012-3264](https://cve.now/CVE-2012-3264.md): Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknow (no CVSS) - [CVE-2012-4014](https://cve.now/CVE-2012-4014.md): Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unkn (no CVSS) - [CVE-2012-4015](https://cve.now/CVE-2012-4015.md): Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-09-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.