# CVEs published 2013-03-26

7 CVEs were published on March 26, 2013: 0 critical, 1 high. Days are UTC.

- [CVE-2012-5943](https://cve.now/CVE-2012-5943.md): Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web (no CVSS)
- [CVE-2013-0454](https://cve.now/CVE-2013-0454.md): The SMB2 implementation in Samba 3.6.x before 3.6.6, as used on the IBM Storwize V7000 Unified 1.3 before 1.3.2.3 and 1.4 before 1.4.0.1 and (no CVSS)
- [CVE-2013-0525](https://cve.now/CVE-2013-0525.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM iNotes 8.5.x allow local users to inject arbitrary web script or HTML via a share (no CVSS)
- [CVE-2013-1608](https://cve.now/CVE-2013-1608.md): Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read (no CVSS)
- [CVE-2013-1609](https://cve.now/CVE-2013-1609.md): Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vau (CVSS 7.8)
- [CVE-2013-1161](https://cve.now/CVE-2013-1161.md): The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connec (no CVSS)
- [CVE-2013-1162](https://cve.now/CVE-2013-1162.md): The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.