# CVEs published 2017-04-29

9 CVEs were published on April 29, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-8325](https://cve.now/CVE-2017-8325.md): The iw\_process\_cols\_to\_intermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to (no CVSS)
- [CVE-2017-8326](https://cve.now/CVE-2017-8326.md): libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might a (no CVSS)
- [CVE-2017-8327](https://cve.now/CVE-2017-8327.md): The bmpr\_read\_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a d (no CVSS)
- [CVE-2017-7957](https://cve.now/CVE-2017-7957.md): XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'voi (no CVSS, com.thoughtworks.xstream:xstream)
- [CVE-2017-8114](https://cve.now/CVE-2017-8114.md): Roundcube Webmail allows arbitrary password resets by authenticated users. (no CVSS)
- [CVE-2017-6553](https://cve.now/CVE-2017-6553.md): Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the polic (no CVSS)
- [CVE-2017-7981](https://cve.now/CVE-2017-7981.md): Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. (no CVSS)
- [CVE-2017-7644](https://cve.now/CVE-2017-7644.md): The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticat (no CVSS)
- [CVE-2017-7945](https://cve.now/CVE-2017-7945.md): The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.