# CVEs published 2013-04-19

7 CVEs were published on April 19, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0129](https://cve.now/CVE-2013-0129.md): Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script (no CVSS)
- [CVE-2013-1086](https://cve.now/CVE-2013-1086.md): Cross-site scripting (XSS) vulnerability in WebAccess in Novell GroupWise before 8.0.3 HP3, and 2012 before SP2, allows remote attackers to (no CVSS)
- [CVE-2013-1416](https://cve.now/CVE-2013-1416.md): The prep\_reprocess\_req function in do\_tgs\_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not pro (no CVSS)
- [CVE-2013-2697](https://cve.now/CVE-2013-2697.md): Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack (no CVSS)
- [CVE-2013-3075](https://cve.now/CVE-2013-3075.md): Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScad (no CVSS)
- [CVE-2013-3210](https://cve.now/CVE-2013-3210.md): Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive inform (no CVSS)
- [CVE-2013-3211](https://cve.now/CVE-2013-3211.md): Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue." (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.