# CVEs published 2017-03-11

9 CVEs were published on March 11, 2017: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2010-4314](https://cve.now/CVE-2010-4314.md): Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code (no CVSS, Novell iPrint webrowser ActiveX plugin)
- [CVE-2017-6466](https://cve.now/CVE-2017-6466.md): F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not pe (no CVSS)
- [CVE-2017-6513](https://cve.now/CVE-2017-6513.md): The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authent (no CVSS)
- [CVE-2017-6808](https://cve.now/CVE-2017-6808.md): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template\_files/admin.faq.php (id parameter). (no CVSS)
- [CVE-2017-6809](https://cve.now/CVE-2017-6809.md): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template\_files/admin.donate.php (id parameter). (no CVSS)
- [CVE-2017-6810](https://cve.now/CVE-2017-6810.md): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template\_files/admin.fplinks.php (linkid parameter). (no CVSS)
- [CVE-2017-6811](https://cve.now/CVE-2017-6811.md): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template\_files/admin.shop.php (id parameter). (no CVSS)
- [CVE-2017-6812](https://cve.now/CVE-2017-6812.md): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template\_files/admin.vote.php (id parameter). (no CVSS)
- [CVE-2017-5638](https://cve.now/CVE-2017-5638.md): The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes (CVSS 9.8, KEV, Apache Software Foundation Apache Struts · org.apache.strut…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.