CVEs published May 3, 2017
28 CVEs were published on May 3, 2017: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…
- 3
- Rapid7 AppSpider Pro
- 2
- Cisco CallManager Express
- 1
- Cisco CVR100W Wireless-N VPN Router
- 1
- Cisco Finesse for Cisco Unified Contact Center Enterprise
- 1
- Cisco Firepower Threat Defense and Cisco ASA with FirePOWER…
- 1
- Cisco Unity Connection
- 1
- Cisco Wide Area Application Services SMART-SSL Accelerator
- 1
- genix/cms
- 1
- IBM BigFix Remote Control
- 1
Medium, low and unrated 28
- CVE-2017-8762GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.genix/cms
- CVE-2017-6620A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unautheCisco CVR100W Wireless-N VPN Router
- CVE-2017-6624A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make uCisco CallManager Express
- CVE-2017-6625A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access conCisco Firepower Threat Defense and Cisco ASA with FirePOWER…
- CVE-2017-6626A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allowCisco Finesse for Cisco Unified Contact Center Enterprise
- CVE-2017-6628A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allowCisco Wide Area Application Services SMART-SSL Accelerator
- CVE-2017-6629A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files iCisco Unity Connection
- CVE-2017-5481Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a le
- CVE-2017-7229PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Co
- CVE-2017-7995Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads
- CVE-2016-0382The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally capturIBM Tealeaf Customer Experience
- CVE-2016-2930IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication.IBM BigFix Remote Control
- CVE-2016-9976IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files.IBM Maximo Asset Management
- CVE-2017-5236Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for theRapid7 AppSpider Pro
- CVE-2017-5240Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component.Rapid7 AppSpider Pro
- CVE-2017-8458Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear
- CVE-2017-8459Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way.
- CVE-2015-9057Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject
- CVE-2015-9058Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary we
- CVE-2016-10367In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security
- CVE-2016-10368Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x with
- CVE-2017-7428NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat.NetIQ iManager 3.x before
- CVE-2017-7430Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…
- CVE-2017-7431Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…
- CVE-2017-7432Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…
- CVE-2017-8453Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive informatio
- CVE-2017-8454Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive informatio
- CVE-2017-8455Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive informatio