# CVEs published 2014-04-05

11 CVEs were published on April 5, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2001-1593](https://cve.now/CVE-2001-1593.md): The tempname\_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy\_user function and possibly other functions, allo (no CVSS)
- [CVE-2012-5565](https://cve.now/CVE-2012-5565.md): Cross-site scripting (XSS) vulnerability in js/compose-dimp.js in Horde Internet Mail Program (IMP) before 5.0.24, as used in Horde Groupwar (no CVSS)
- [CVE-2012-5566](https://cve.now/CVE-2012-5566.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.17, as used in Horde Groupware Web (no CVSS)
- [CVE-2012-5567](https://cve.now/CVE-2012-5567.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.18, as used in Horde Groupware Web (no CVSS)
- [CVE-2012-6640](https://cve.now/CVE-2012-6640.md): Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition befo (no CVSS)
- [CVE-2014-2600](https://cve.now/CVE-2014-2600.md): Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Com (no CVSS)
- [CVE-2014-2730](https://cve.now/CVE-2014-2730.md): The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during (no CVSS)
- [CVE-2014-0337](https://cve.now/CVE-2014-0337.md): Cross-site scripting (XSS) vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allo (no CVSS)
- [CVE-2014-0827](https://cve.now/CVE-2014-0827.md): Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2014-2144](https://cve.now/CVE-2014-2144.md): Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 t (no CVSS)
- [CVE-2014-2145](https://cve.now/CVE-2014-2145.md): Directory traversal vulnerability in the messaging API in Cisco Unity Connection allows remote authenticated users to read arbitrary files v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.