# CVEs published 2013-05-09

14 CVEs were published on May 9, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0600](https://cve.now/CVE-2013-0600.md): Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass au (no CVSS)
- [CVE-2013-0684](https://cve.now/CVE-2013-0684.md): SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers (no CVSS)
- [CVE-2013-0685](https://cve.now/CVE-2013-0685.md): Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, (no CVSS)
- [CVE-2013-0686](https://cve.now/CVE-2013-0686.md): Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send (no CVSS)
- [CVE-2013-0688](https://cve.now/CVE-2013-0688.md): Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows rem (no CVSS)
- [CVE-2013-1220](https://cve.now/CVE-2013-1220.md): The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to cause a denial (no CVSS)
- [CVE-2013-1221](https://cve.now/CVE-2013-1221.md): The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomca (no CVSS)
- [CVE-2013-1222](https://cve.now/CVE-2013-1222.md): The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomca (no CVSS)
- [CVE-2013-1223](https://cve.now/CVE-2013-1223.md): The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, (no CVSS)
- [CVE-2013-1224](https://cve.now/CVE-2013-1224.md): Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows re (no CVSS)
- [CVE-2013-1225](https://cve.now/CVE-2013-1225.md): Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (no CVSS)
- [CVE-2013-1611](https://cve.now/CVE-2013-1611.md): Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail Gatew (no CVSS)
- [CVE-2013-2308](https://cve.now/CVE-2013-2308.md): The (1) OWA Helper and (2) OSG Lite programs in SoftBank Online Service Gate allow remote authenticated users to discover their own password (no CVSS)
- [CVE-2013-3336](https://cve.now/CVE-2013-3336.md): Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.