# CVEs published 2017-01-16

2 CVEs were published on January 16, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2016-7904](https://cve.now/CVE-2016-7904.md): Cross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of admi (no CVSS)
- [CVE-2017-5223](https://cve.now/CVE-2017-5223.md): An issue was discovered in PHPMailer before 5.2.22. (no CVSS, phpmailer/phpmailer)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-01-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.