# CVEs published 2013-05-01

21 CVEs were published on May 1, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4952](https://cve.now/CVE-2012-4952.md): Henry Schein Dentrix G5 before 15.1.294 has a single internal-database password that is shared across different customers' installations, wh (no CVSS)
- [CVE-2013-0127](https://cve.now/CVE-2013-0127.md): IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows (no CVSS)
- [CVE-2013-0140](https://cve.now/CVE-2013-0140.md): SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows r (no CVSS)
- [CVE-2013-0141](https://cve.now/CVE-2013-0141.md): Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload (no CVSS)
- [CVE-2013-0538](https://cve.now/CVE-2013-0538.md): Cross-site scripting (XSS) vulnerability in IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 allows remote at (no CVSS)
- [CVE-2013-0666](https://cve.now/CVE-2013-0666.md): The configuration utility in MatrikonOPC Security Gateway 1.0 allows remote attackers to cause a denial of service (unhandled exception and (no CVSS)
- [CVE-2013-0673](https://cve.now/CVE-2013-0673.md): Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote atta (no CVSS)
- [CVE-2013-0699](https://cve.now/CVE-2013-0699.md): The Galil RIO-47100 Pocket PLC allows remote attackers to cause a denial of service via a session that includes "repeated requests." (no CVSS)
- [CVE-2013-1156](https://cve.now/CVE-2013-1156.md): Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2013-1157](https://cve.now/CVE-2013-1157.md): Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) Java servlet container in Cisco Prime Central for Hosted Collabo (no CVSS)
- [CVE-2013-1158](https://cve.now/CVE-2013-1158.md): Cross-site scripting (XSS) vulnerability in the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solut (no CVSS)
- [CVE-2013-1159](https://cve.now/CVE-2013-1159.md): Cross-site scripting (XSS) vulnerability in the Netcool Impact (NCI) web menus in Cisco Prime Central for Hosted Collaboration Solution allo (no CVSS)
- [CVE-2013-1160](https://cve.now/CVE-2013-1160.md): Cross-site scripting (XSS) vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote at (no CVSS)
- [CVE-2013-1229](https://cve.now/CVE-2013-1229.md): TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite (TMS) on 64-bit platforms allows remote attackers to cause (no CVSS)
- [CVE-2013-1230](https://cve.now/CVE-2013-1230.md): Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed (no CVSS)
- [CVE-2013-3061](https://cve.now/CVE-2013-3061.md): The ISHMED-PATRED\_TRANSACT\_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, (no CVSS)
- [CVE-2013-3062](https://cve.now/CVE-2013-3062.md): The CP\_RC\_TRANSACTION\_CALL\_BY\_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authe (no CVSS)
- [CVE-2013-3063](https://cve.now/CVE-2013-3063.md): SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors. (no CVSS)
- [CVE-2013-3079](https://cve.now/CVE-2013-3079.md): VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privile (no CVSS)
- [CVE-2013-3080](https://cve.now/CVE-2013-3080.md): VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and con (no CVSS)
- [CVE-2013-3107](https://cve.now/CVE-2013-3107.md): VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass au (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.