# CVEs published 2017-03-06

16 CVEs were published on March 6, 2017: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2016-10244](https://cve.now/CVE-2016-10244.md): The parse\_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows re (no CVSS)
- [CVE-2017-5197](https://cve.now/CVE-2017-5197.md): There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. (no CVSS, silverstripe/cms)
- [CVE-2017-5633](https://cve.now/CVE-2017-5633.md): Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (no CVSS)
- [CVE-2017-5999](https://cve.now/CVE-2017-5999.md): An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. (no CVSS)
- [CVE-2017-6411](https://cve.now/CVE-2017-6411.md): Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN\_1.00 devices allows remote attackers to change the DNS or firewall configuration (no CVSS)
- [CVE-2017-6334](https://cve.now/CVE-2017-6334.md): dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands (CVSS 8.8, KEV)
- [CVE-2017-6351](https://cve.now/CVE-2017-6351.md): The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. (no CVSS)
- [CVE-2017-6416](https://cve.now/CVE-2017-6416.md): An issue was discovered in SysGauge 1.5.18. (no CVSS)
- [CVE-2017-6497](https://cve.now/CVE-2017-6497.md): An issue was discovered in ImageMagick 6.9.7. (no CVSS)
- [CVE-2017-6498](https://cve.now/CVE-2017-6498.md): An issue was discovered in ImageMagick 6.9.7. (no CVSS)
- [CVE-2017-6499](https://cve.now/CVE-2017-6499.md): An issue was discovered in Magick++ in ImageMagick 6.9.7. (no CVSS)
- [CVE-2017-6500](https://cve.now/CVE-2017-6500.md): An issue was discovered in ImageMagick 6.9.7. (no CVSS)
- [CVE-2017-6501](https://cve.now/CVE-2017-6501.md): An issue was discovered in ImageMagick 6.9.7. (no CVSS)
- [CVE-2017-6502](https://cve.now/CVE-2017-6502.md): An issue was discovered in ImageMagick 6.9.7. (no CVSS)
- [CVE-2017-6503](https://cve.now/CVE-2017-6503.md): WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS. (no CVSS)
- [CVE-2017-6504](https://cve.now/CVE-2017-6504.md): WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.