# CVEs published 2013-06-27

11 CVEs were published on June 27, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3383](https://cve.now/CVE-2013-3383.md): The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-5 (no CVSS)
- [CVE-2013-3384](https://cve.now/CVE-2013-3384.md): The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-5 (no CVSS)
- [CVE-2013-3385](https://cve.now/CVE-2013-3385.md): The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, (no CVSS)
- [CVE-2013-3386](https://cve.now/CVE-2013-3386.md): The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices before 7.1.5 (no CVSS)
- [CVE-2012-6574](https://cve.now/CVE-2012-6574.md): Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers from certain (no CVSS)
- [CVE-2012-6575](https://cve.now/CVE-2012-6575.md): Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupal allows remote attackers to inje (no CVSS)
- [CVE-2012-6576](https://cve.now/CVE-2012-6576.md): Cross-site scripting (XSS) vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sou (no CVSS)
- [CVE-2012-6577](https://cve.now/CVE-2012-6577.md): SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions t (no CVSS)
- [CVE-2013-4719](https://cve.now/CVE-2013-4719.md): SQL injection vulnerability in the SEO Pack for tt\_news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2013-4720](https://cve.now/CVE-2013-4720.md): SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2013-4721](https://cve.now/CVE-2013-4721.md): SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.