# CVEs published 2014-02-07

7 CVEs were published on February 7, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1914](https://cve.now/CVE-2014-1914.md): Multiple cross-site scripting (XSS) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to inject arb (no CVSS)
- [CVE-2014-1915](https://cve.now/CVE-2014-1915.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hij (no CVSS)
- [CVE-2014-1643](https://cve.now/CVE-2014-1643.md): The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authentica (no CVSS)
- [CVE-2014-1696](https://cve.now/CVE-2014-1696.md): Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to ob (no CVSS)
- [CVE-2014-1697](https://cve.now/CVE-2014-1697.md): The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted (no CVSS)
- [CVE-2014-1698](https://cve.now/CVE-2014-1698.md): Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via c (no CVSS)
- [CVE-2014-1699](https://cve.now/CVE-2014-1699.md): Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malfo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.