# CVEs published 2013-02-12 27 CVEs were published on February 12, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2011-5256](https://cve.now/CVE-2011-5256.md): Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379-20111116, when viewing survey results, allow (no CVSS) - [CVE-2011-5257](https://cve.now/CVE-2011-5257.md): Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arb (no CVSS) - [CVE-2011-5258](https://cve.now/CVE-2011-5258.md): Multiple cross-site scripting (XSS) vulnerabilities in OrangeHRM before 2.6.11.2 allow remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2011-5259](https://cve.now/CVE-2011-5259.md): SQL injection vulnerability in lib/controllers/CentralController.php in OrangeHRM before 2.6.11.2 allows remote attackers to execute arbitra (no CVSS) - [CVE-2011-5260](https://cve.now/CVE-2011-5260.md): Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2011-5261](https://cve.now/CVE-2011-5261.md): Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remot (no CVSS) - [CVE-2011-5262](https://cve.now/CVE-2011-5262.md): SQL injection vulnerability in prodpage.cfm in SonicWALL Aventail allows remote attackers to execute arbitrary SQL commands via the Category (no CVSS) - [CVE-2011-5263](https://cve.now/CVE-2011-5263.md): Cross-site scripting (XSS) vulnerability in RetrieveMailExamples in SAP NetWeaver 7.30 and earlier allows remote attackers to inject arbitra (no CVSS) - [CVE-2011-5264](https://cve.now/CVE-2011-5264.md): Cross-site scripting (XSS) vulnerability in lazyest-backup.php in the Lazyest Backup plugin before 0.2.2 for WordPress allows remote attacke (no CVSS) - [CVE-2011-5265](https://cve.now/CVE-2011-5265.md): Cross-site scripting (XSS) vulnerability in cached\_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attack (no CVSS) - [CVE-2013-0637](https://cve.now/CVE-2013-0637.md): Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, (no CVSS) - [CVE-2013-0638](https://cve.now/CVE-2013-0638.md): Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, (no CVSS) - [CVE-2013-0639](https://cve.now/CVE-2013-0639.md): Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.6 (no CVSS) - [CVE-2013-0642](https://cve.now/CVE-2013-0642.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-0644](https://cve.now/CVE-2013-0644.md): Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x b (no CVSS) - [CVE-2013-0645](https://cve.now/CVE-2013-0645.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-0647](https://cve.now/CVE-2013-0647.md): Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, (no CVSS) - [CVE-2013-0649](https://cve.now/CVE-2013-0649.md): Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x b (no CVSS) - [CVE-2013-1365](https://cve.now/CVE-2013-1365.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1366](https://cve.now/CVE-2013-1366.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1367](https://cve.now/CVE-2013-1367.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1368](https://cve.now/CVE-2013-1368.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1369](https://cve.now/CVE-2013-1369.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1370](https://cve.now/CVE-2013-1370.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1372](https://cve.now/CVE-2013-1372.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1373](https://cve.now/CVE-2013-1373.md): Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.60 (no CVSS) - [CVE-2013-1374](https://cve.now/CVE-2013-1374.md): Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x b (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-02-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.