# CVEs published 2016-04-05

6 CVEs were published on April 5, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-3125](https://cve.now/CVE-2016-3125.md): The mod\_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cau (no CVSS)
- [CVE-2016-1175](https://cve.now/CVE-2016-1175.md): Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through 1.03.01.04 allows remote attackers to hija (no CVSS)
- [CVE-2016-1176](https://cve.now/CVE-2016-1176.md): Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page. (no CVSS)
- [CVE-2016-1789](https://cve.now/CVE-2016-1789.md): Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity (no CVSS)
- [CVE-2016-1177](https://cve.now/CVE-2016-1177.md): The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to con (no CVSS)
- [CVE-2016-2000](https://cve.now/CVE-2016-2000.md): HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.