# CVEs published 2013-05-31

7 CVEs were published on May 31, 2013: 0 critical, 1 high. Days are UTC.

- [CVE-2013-1247](https://cve.now/CVE-2013-1247.md): Cross-site scripting (XSS) vulnerability in the wireless configuration module in Cisco Prime Infrastructure allows remote attackers to injec (no CVSS)
- [CVE-2013-3315](https://cve.now/CVE-2013-3315.md): The server in TIBCO Silver Mobile 1.1.0 does not properly verify access to the administrator role before executing a command, which allows a (no CVSS)
- [CVE-2013-3735](https://cve.now/CVE-2013-3735.md): The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows co (CVSS 7.5)
- [CVE-2013-1246](https://cve.now/CVE-2013-1246.md): Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a de (no CVSS)
- [CVE-2013-3719](https://cve.now/CVE-2013-3719.md): Cross-site scripting (XSS) vulnerability in the aiContactSafe component before 2.0.21 for Joomla! allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2013-3720](https://cve.now/CVE-2013-3720.md): Cross-site scripting (XSS) vulnerability in widget\_remove.php in the Feedweb plugin before 1.9 for WordPress allows remote authenticated adm (no CVSS)
- [CVE-2013-3721](https://cve.now/CVE-2013-3721.md): SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL commands via the d paramete (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.