# CVEs published 2016-08-03 9 CVEs were published on August 3, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-4833](https://cve.now/CVE-2016-4833.md): Cross-site scripting (XSS) vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress allows remote attackers to inject arbitrar (no CVSS) - [CVE-2016-5639](https://cve.now/CVE-2016-5639.md): Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attac (no CVSS) - [CVE-2016-5640](https://cve.now/CVE-2016-5640.md): Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote atta (no CVSS) - [CVE-2016-5666](https://cve.now/CVE-2016-5666.md): Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client to perform authentication, which allows re (no CVSS) - [CVE-2016-5667](https://cve.now/CVE-2016-5667.md): Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication via a direct (no CVSS) - [CVE-2016-5668](https://cve.now/CVE-2016-5668.md): Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote attackers to bypass authentication and change se (no CVSS) - [CVE-2016-5669](https://cve.now/CVE-2016-5669.md): Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an (no CVSS) - [CVE-2016-5670](https://cve.now/CVE-2016-5670.md): Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded password of admin for the admin account, whi (no CVSS) - [CVE-2016-5671](https://cve.now/CVE-2016-5671.md): Multiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100-STR devices with firmware through 1.3039.0004 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-08-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.