# CVEs published 2013-03-27 37 CVEs were published on March 27, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-1887](https://cve.now/CVE-2013-1887.md): Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users w (no CVSS) - [CVE-2013-0181](https://cve.now/CVE-2013-0181.md): Cross-site scripting (XSS) vulnerability in Views in the Search API (search\_api) module 7.x-1.x before 7.x-1.4 for Drupal, when using certai (no CVSS) - [CVE-2013-0182](https://cve.now/CVE-2013-0182.md): The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read ar (no CVSS) - [CVE-2013-0257](https://cve.now/CVE-2013-0257.md): The email2image module 6.x-1.x and 6.x-2.x for Drupal does not properly restrict access to nodes, which allows remote attackers to read imag (no CVSS) - [CVE-2013-0258](https://cve.now/CVE-2013-0258.md): The Google Authenticator login (ga\_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote a (no CVSS) - [CVE-2013-0259](https://cve.now/CVE-2013-0259.md): Cross-site scripting (XSS) vulnerability in the Boxes module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with admini (no CVSS) - [CVE-2013-0260](https://cve.now/CVE-2013-0260.md): Unspecified vulnerability in the Drush Debian Packaging module for Drupal allows local users to obtain database credentials via unknown vect (no CVSS) - [CVE-2013-0316](https://cve.now/CVE-2013-0316.md): The Image module in Drupal 7.x before 7.20 allows remote attackers to cause a denial of service (CPU and disk space consumption) via a large (no CVSS) - [CVE-2013-0317](https://cve.now/CVE-2013-0317.md): Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og\_manager\_change) module 7.x-2.x before 7.x-2.1 for Drup (no CVSS) - [CVE-2013-0318](https://cve.now/CVE-2013-0318.md): The admin page in the Banckle Chat module for Drupal does not properly restrict access, which allows remote attackers to bypass intended res (no CVSS) - [CVE-2013-0319](https://cve.now/CVE-2013-0319.md): Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows re (no CVSS) - [CVE-2013-0320](https://cve.now/CVE-2013-0320.md): Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy\_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x before (no CVSS) - [CVE-2013-0321](https://cve.now/CVE-2013-0321.md): Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc\_views) module 6.x before 6.x-3.3 for Drupal allows remote attack (no CVSS) - [CVE-2013-0322](https://cve.now/CVE-2013-0322.md): Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject (no CVSS) - [CVE-2013-0323](https://cve.now/CVE-2013-0323.md): Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows rem (no CVSS) - [CVE-2013-0324](https://cve.now/CVE-2013-0324.md): Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allo (no CVSS) - [CVE-2013-0325](https://cve.now/CVE-2013-0325.md): Multiple cross-site scripting (XSS) vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal (no CVSS) - [CVE-2013-1778](https://cve.now/CVE-2013-1778.md): Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the (no CVSS) - [CVE-2013-1779](https://cve.now/CVE-2013-1779.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated use (no CVSS) - [CVE-2013-1780](https://cve.now/CVE-2013-1780.md): Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users wi (no CVSS) - [CVE-2013-1781](https://cve.now/CVE-2013-1781.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote authentica (no CVSS) - [CVE-2013-1782](https://cve.now/CVE-2013-1782.md): Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users wi (no CVSS) - [CVE-2013-1783](https://cve.now/CVE-2013-1783.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allow (no CVSS) - [CVE-2013-1784](https://cve.now/CVE-2013-1784.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows remote authenticated use (no CVSS) - [CVE-2013-1785](https://cve.now/CVE-2013-1785.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote auth (no CVSS) - [CVE-2013-1786](https://cve.now/CVE-2013-1786.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows remote authenticated u (no CVSS) - [CVE-2013-1787](https://cve.now/CVE-2013-1787.md): Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote authen (no CVSS) - [CVE-2013-1859](https://cve.now/CVE-2013-1859.md): The Node Parameter Control module 6.x-1.x for Drupal does not properly restrict access to the configuration options, which allows remote att (no CVSS) - [CVE-2013-2715](https://cve.now/CVE-2013-2715.md): Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search\_api) module 7.x-1.x before 7.x-1.4 for Drupal allows re (no CVSS) - [CVE-2013-0718](https://cve.now/CVE-2013-0718.md): The Simeji application 4.8.1 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive (no CVSS) - [CVE-2013-0719](https://cve.now/CVE-2013-0719.md): The ArtIME Japanese Input application 1.1.2 and earlier for Android uses weak permissions for unspecified files, which allows attackers to o (no CVSS) - [CVE-2013-0720](https://cve.now/CVE-2013-0720.md): The COBIME application before 0.9.4 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive info (no CVSS) - [CVE-2013-2300](https://cve.now/CVE-2013-2300.md): The FlickWnn (aka OpenWnn/Flick support) application 2.02 and earlier for Android uses weak permissions for unspecified files, which allows (no CVSS) - [CVE-2013-0486](https://cve.now/CVE-2013-0486.md): Memory leak in the HTTP server in IBM Domino 8.5.x allows remote attackers to cause a denial of service (memory consumption and daemon crash (no CVSS) - [CVE-2013-0487](https://cve.now/CVE-2013-0487.md): The Java Console in IBM Domino 8.5.x allows remote authenticated users to hijack temporary credentials by leveraging knowledge of configurat (no CVSS) - [CVE-2013-0488](https://cve.now/CVE-2013-0488.md): Cross-site scripting (XSS) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote attackers to i (no CVSS) - [CVE-2013-0489](https://cve.now/CVE-2013-0489.md): Cross-site request forgery (CSRF) vulnerability in webadmin.nsf (aka the Web Administrator client) in IBM Domino 8.5.x allows remote authent (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.