# CVEs published 2013-05-05

5 CVEs were published on May 5, 2013: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-0726](https://cve.now/CVE-2013-0726.md): Stack-based buffer overflow in the ERM\_convert\_to\_correct\_webpath function in ermapper\_u.dll in ERDAS ER Viewer before 13.00.0001 allows rem (no CVSS)
- [CVE-2013-1092](https://cve.now/CVE-2013-1092.md): Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM) 7 through 7.1 might allow local users to g (no CVSS)
- [CVE-2013-1347](https://cve.now/CVE-2013-1347.md): Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (CVSS 8.8, KEV)
- [CVE-2013-2702](https://cve.now/CVE-2013-2702.md): Cross-site request forgery (CSRF) vulnerability in the Easy AdSense Lite plugin before 6.10 for WordPress allows remote attackers to hijack (no CVSS)
- [CVE-2013-2703](https://cve.now/CVE-2013-2703.md): Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.