# CVEs published 2017-03-09

28 CVEs were published on March 9, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-6591](https://cve.now/CVE-2017-6591.md): There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field. (no CVSS, django-epiceditor)
- [CVE-2017-6526](https://cve.now/CVE-2017-6526.md): An issue was discovered in dnaTools dnaLIMS 4-2015s13. (no CVSS)
- [CVE-2017-6527](https://cve.now/CVE-2017-6527.md): An issue was discovered in dnaTools dnaLIMS 4-2015s13. (no CVSS)
- [CVE-2017-6528](https://cve.now/CVE-2017-6528.md): An issue was discovered in dnaTools dnaLIMS 4-2015s13. (no CVSS)
- [CVE-2017-6529](https://cve.now/CVE-2017-6529.md): An issue was discovered in dnaTools dnaLIMS 4-2015s13. (no CVSS)
- [CVE-2017-6589](https://cve.now/CVE-2017-6589.md): EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. (no CVSS, epiceditor)
- [CVE-2017-6590](https://cve.now/CVE-2017-6590.md): An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. (no CVSS)
- [CVE-2017-6432](https://cve.now/CVE-2017-6432.md): An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. (no CVSS)
- [CVE-2017-6547](https://cve.now/CVE-2017-6547.md): Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC6 (no CVSS)
- [CVE-2017-6548](https://cve.now/CVE-2017-6548.md): Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC (no CVSS)
- [CVE-2017-6549](https://cve.now/CVE-2017-6549.md): Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R (no CVSS)
- [CVE-2017-6552](https://cve.now/CVE-2017-6552.md): Livebox 3 Sagemcom SG30\_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can b (no CVSS)
- [CVE-2017-6555](https://cve.now/CVE-2017-6555.md): Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject (no CVSS)
- [CVE-2017-6556](https://cve.now/CVE-2017-6556.md): Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script o (no CVSS)
- [CVE-2017-6558](https://cve.now/CVE-2017-6558.md): iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allow (no CVSS)
- [CVE-2017-6559](https://cve.now/CVE-2017-6559.md): XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif\[\]=\[XSS\] attack. (no CVSS)
- [CVE-2017-6560](https://cve.now/CVE-2017-6560.md): XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=\[XSS\]&editObjId=\[XSS\] attack. (no CVSS)
- [CVE-2017-6561](https://cve.now/CVE-2017-6561.md): XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=\[XSS\] attack. (no CVSS)
- [CVE-2017-6562](https://cve.now/CVE-2017-6562.md): XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=\[XSS\] attack. (no CVSS)
- [CVE-2017-6570](https://cve.now/CVE-2017-6570.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6571](https://cve.now/CVE-2017-6571.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6572](https://cve.now/CVE-2017-6572.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6573](https://cve.now/CVE-2017-6573.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6574](https://cve.now/CVE-2017-6574.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6575](https://cve.now/CVE-2017-6575.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6576](https://cve.now/CVE-2017-6576.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6577](https://cve.now/CVE-2017-6577.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)
- [CVE-2017-6578](https://cve.now/CVE-2017-6578.md): A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.