# CVEs published 2013-05-21

7 CVEs were published on May 21, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6746](https://cve.now/CVE-2007-6746.md): telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the (no CVSS)
- [CVE-2012-6137](https://cve.now/CVE-2012-6137.md): rhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat Network Classic server's X.509 certificate when (no CVSS)
- [CVE-2013-1964](https://cve.now/CVE-2013-1964.md): Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administr (no CVSS)
- [CVE-2013-1977](https://cve.now/CVE-2013-1977.md): OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the L (no CVSS)
- [CVE-2013-2006](https://cve.now/CVE-2013-2006.md): OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin\_token and (2) LDAP password in plaint (no CVSS, keystone)
- [CVE-2013-2007](https://cve.now/CVE-2013-2007.md): The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which (no CVSS)
- [CVE-2013-2059](https://cve.now/CVE-2013-2059.md): OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authenticatio (no CVSS, keystone)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.