# CVEs published 2013-06-21 23 CVEs were published on June 21, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-3392](https://cve.now/CVE-2013-3392.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbi (no CVSS) - [CVE-2013-4613](https://cve.now/CVE-2013-4613.md): The default configuration of the administrative interface on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 (no CVSS) - [CVE-2013-4614](https://cve.now/CVE-2013-4614.md): English/pages\_MacUS/wls\_set\_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers shows th (no CVSS) - [CVE-2013-4615](https://cve.now/CVE-2013-4615.md): The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause a denial of service (no CVSS) - [CVE-2013-4635](https://cve.now/CVE-2013-4635.md): Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows conte (no CVSS) - [CVE-2013-4636](https://cve.now/CVE-2013-4636.md): The mget function in libmagic/softmagic.c in the Fileinfo component in PHP 5.4.x before 5.4.16 allows remote attackers to cause a denial of (no CVSS) - [CVE-2013-2110](https://cve.now/CVE-2013-2110.md): Heap-based buffer overflow in the php\_quot\_print\_encode function in ext/standard/quot\_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 a (no CVSS) - [CVE-2013-3250](https://cve.now/CVE-2013-3250.md): Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hija (no CVSS) - [CVE-2012-6572](https://cve.now/CVE-2012-6572.md): Cross-site scripting (XSS) vulnerability in the phptemplate\_preprocess\_node function in template.php in the Inf08 theme 6.x-1.x before 6.x-1 (no CVSS) - [CVE-2013-0523](https://cve.now/CVE-2013-0523.md): IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryptio (no CVSS) - [CVE-2013-0536](https://cve.now/CVE-2013-0536.md): ntmulti.exe in the Multi User Profile Cleanup service in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3 before FP5, and 9.0 before IF (no CVSS) - [CVE-2013-0548](https://cve.now/CVE-2013-0548.md): Multiple cross-site scripting (XSS) vulnerabilities in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 (no CVSS) - [CVE-2013-0551](https://cve.now/CVE-2013-0551.md): The Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, a (no CVSS) - [CVE-2013-2960](https://cve.now/CVE-2013-2960.md): Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 throug (no CVSS) - [CVE-2013-2961](https://cve.now/CVE-2013-2961.md): The internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through F (no CVSS) - [CVE-2013-0527](https://cve.now/CVE-2013-0527.md): The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not close pages upon the timeout of a session, w (no CVSS) - [CVE-2013-0529](https://cve.now/CVE-2013-0529.md): The Browser in IBM Sterling Connect:Direct 1.4 before 1.4.0.11 and 1.5 through 1.5.0.1 does not set the secure flag for the session cookie i (no CVSS) - [CVE-2013-0534](https://cve.now/CVE-2013-0534.md): The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allo (no CVSS) - [CVE-2013-3035](https://cve.now/CVE-2013-3035.md): The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denia (no CVSS) - [CVE-2013-2173](https://cve.now/CVE-2013-2173.md): wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (no CVSS) - [CVE-2013-3377](https://cve.now/CVE-2013-3377.md): Cisco TelePresence TC Software before 5.1.7 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (device reload) (no CVSS) - [CVE-2013-3378](https://cve.now/CVE-2013-3378.md): Cisco TelePresence TC Software before 6.1 and TE Software before 4.1.3 allow remote attackers to cause a denial of service (temporary device (no CVSS) - [CVE-2013-3379](https://cve.now/CVE-2013-3379.md): The firewall subsystem in Cisco TelePresence TC Software before 4.2 does not properly implement rules that grant access to hosts, which allo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-06-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.