# CVEs published 2013-09-06

17 CVEs were published on September 6, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5990](https://cve.now/CVE-2012-5990.md): Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless C (no CVSS)
- [CVE-2013-1115](https://cve.now/CVE-2013-1115.md): Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28 before (no CVSS)
- [CVE-2013-1116](https://cve.now/CVE-2013-1116.md): Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28 before (no CVSS)
- [CVE-2013-1117](https://cve.now/CVE-2013-1117.md): Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111 (no CVSS)
- [CVE-2013-1118](https://cve.now/CVE-2013-1118.md): Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28 bef (no CVSS)
- [CVE-2013-1119](https://cve.now/CVE-2013-1119.md): Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32\_ORION111, and T28 before T28.8 al (no CVSS)
- [CVE-2013-1228](https://cve.now/CVE-2013-1228.md): Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and m (no CVSS)
- [CVE-2013-3599](https://cve.now/CVE-2013-3599.md): userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role (no CVSS)
- [CVE-2013-3600](https://cve.now/CVE-2013-3600.md): Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecif (no CVSS)
- [CVE-2013-3601](https://cve.now/CVE-2013-3601.md): Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to pe (no CVSS)
- [CVE-2013-3602](https://cve.now/CVE-2013-3602.md): SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users (no CVSS)
- [CVE-2013-3603](https://cve.now/CVE-2013-3603.md): Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2013-3604](https://cve.now/CVE-2013-3604.md): Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbi (no CVSS)
- [CVE-2013-3605](https://cve.now/CVE-2013-3605.md): Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the aut (no CVSS)
- [CVE-2013-5706](https://cve.now/CVE-2013-5706.md): Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbi (no CVSS)
- [CVE-2013-5707](https://cve.now/CVE-2013-5707.md): Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbi (no CVSS)
- [CVE-2013-5708](https://cve.now/CVE-2013-5708.md): Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.