# CVEs published 2017-04-01

9 CVEs were published on April 1, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7388](https://cve.now/CVE-2017-7388.md): A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. (no CVSS)
- [CVE-2017-7389](https://cve.now/CVE-2017-7389.md): Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release\_3.5.4'. (no CVSS)
- [CVE-2017-7390](https://cve.now/CVE-2017-7390.md): A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. (no CVSS, movingbytes/social-network)
- [CVE-2017-7391](https://cve.now/CVE-2017-7391.md): A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. (no CVSS, dweeves/magmi)
- [CVE-2017-7392](https://cve.now/CVE-2017-7392.md): In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in t (no CVSS)
- [CVE-2017-7393](https://cve.now/CVE-2017-7393.md): In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of serv (no CVSS)
- [CVE-2017-7394](https://cve.now/CVE-2017-7394.md): In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames. (no CVSS)
- [CVE-2017-7395](https://cve.now/CVE-2017-7395.md): In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the serv (no CVSS)
- [CVE-2017-7396](https://cve.now/CVE-2017-7396.md): In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.