# CVEs published 2017-03-05

16 CVEs were published on March 5, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-6446](https://cve.now/CVE-2017-6446.md): XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters. (no CVSS)
- [CVE-2017-6445](https://cve.now/CVE-2017-6445.md): The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections no (no CVSS)
- [CVE-2017-6478](https://cve.now/CVE-2017-6478.md): paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter). (no CVSS)
- [CVE-2017-6479](https://cve.now/CVE-2017-6479.md): FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter). (no CVSS)
- [CVE-2017-6480](https://cve.now/CVE-2017-6480.md): groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter). (no CVSS)
- [CVE-2017-6481](https://cve.now/CVE-2017-6481.md): Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. (no CVSS)
- [CVE-2017-6483](https://cve.now/CVE-2017-6483.md): Multiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. (no CVSS)
- [CVE-2017-6484](https://cve.now/CVE-2017-6484.md): Multiple Cross-Site Scripting (XSS) issues were discovered in INTER-Mediator 5.5. (no CVSS, inter-mediator/inter-mediator)
- [CVE-2017-6485](https://cve.now/CVE-2017-6485.md): A Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03. (no CVSS)
- [CVE-2017-6486](https://cve.now/CVE-2017-6486.md): A Cross-Site Scripting (XSS) issue was discovered in reasoncms before 4.7.1. (no CVSS)
- [CVE-2017-6487](https://cve.now/CVE-2017-6487.md): Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. (no CVSS)
- [CVE-2017-6488](https://cve.now/CVE-2017-6488.md): Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. (no CVSS)
- [CVE-2017-6489](https://cve.now/CVE-2017-6489.md): Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. (no CVSS)
- [CVE-2017-6490](https://cve.now/CVE-2017-6490.md): Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. (no CVSS)
- [CVE-2017-6491](https://cve.now/CVE-2017-6491.md): Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. (no CVSS)
- [CVE-2017-6492](https://cve.now/CVE-2017-6492.md): SQL Injection was discovered in adm\_program/modules/dates/dates\_function.php in Admidio 3.2.5. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.