# CVEs published 2013-06-01

5 CVEs were published on June 1, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3544](https://cve.now/CVE-2012-3544.md): Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows rem (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2013-0136](https://cve.now/CVE-2013-0136.md): Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticate (no CVSS)
- [CVE-2013-2067](https://cve.now/CVE-2013-2067.md): java/org/apache/catalina/authenticator/FormAuthenticator.java in the form authentication feature in Apache Tomcat 6.0.21 through 6.0.36 and (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2013-2071](https://cve.now/CVE-2013-2071.md): java/org/apache/catalina/core/AsyncContextImpl.java in Apache Tomcat 7.x before 7.0.40 does not properly handle the throwing of a RuntimeExc (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2013-3261](https://cve.now/CVE-2013-3261.md): Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.