# CVEs published 2017-03-21

22 CVEs were published on March 21, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7215](https://cve.now/CVE-2017-7215.md): Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app (no CVSS)
- [CVE-2017-7214](https://cve.now/CVE-2017-7214.md): An issue was discovered in exception\_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. (no CVSS, nova)
- [CVE-2016-4504](https://cve.now/CVE-2016-4504.md): A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and (no CVSS, Meteocontrol WEB'log)
- [CVE-2016-6650](https://cve.now/CVE-2016-6650.md): EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability t (no CVSS, EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint…)
- [CVE-2017-3849](https://cve.now/CVE-2017-3849.md): A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Ci (no CVSS, Cisco IOS and IOS XE)
- [CVE-2017-3850](https://cve.now/CVE-2017-3850.md): A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (no CVSS, Cisco IOS and IOS XE)
- [CVE-2017-5565](https://cve.now/CVE-2017-5565.md): Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Securi (no CVSS)
- [CVE-2017-5566](https://cve.now/CVE-2017-5566.md): Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and (no CVSS)
- [CVE-2017-5567](https://cve.now/CVE-2017-5567.md): Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), an (no CVSS)
- [CVE-2017-6186](https://cve.now/CVE-2017-6186.md): Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (no CVSS)
- [CVE-2017-6417](https://cve.now/CVE-2017-6417.md): Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suit (no CVSS)
- [CVE-2014-9939](https://cve.now/CVE-2014-9939.md): ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. (no CVSS)
- [CVE-2017-7200](https://cve.now/CVE-2017-7200.md): An SSRF issue was discovered in OpenStack Glance before Newton. (no CVSS, glance)
- [CVE-2017-7202](https://cve.now/CVE-2017-7202.md): Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. (no CVSS)
- [CVE-2017-7203](https://cve.now/CVE-2017-7203.md): A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. (no CVSS)
- [CVE-2017-7204](https://cve.now/CVE-2017-7204.md): A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. (no CVSS, imdbphp/imdbphp)
- [CVE-2017-7205](https://cve.now/CVE-2017-7205.md): A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. (no CVSS)
- [CVE-2017-7206](https://cve.now/CVE-2017-7206.md): The ff\_h2645\_extract\_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over- (no CVSS)
- [CVE-2017-7207](https://cve.now/CVE-2017-7207.md): The mem\_get\_bits\_rectangle function in Artifex Software, Inc. (no CVSS)
- [CVE-2017-7208](https://cve.now/CVE-2017-7208.md): The decode\_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain s (no CVSS)
- [CVE-2017-7209](https://cve.now/CVE-2017-7209.md): The dump\_section\_as\_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binar (no CVSS)
- [CVE-2017-7210](https://cve.now/CVE-2017-7210.md): objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.