# CVEs published 2017-05-03

28 CVEs were published on May 3, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-8762](https://cve.now/CVE-2017-8762.md): GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element. (no CVSS, genix/cms)
- [CVE-2017-6620](https://cve.now/CVE-2017-6620.md): A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthe (no CVSS, Cisco CVR100W Wireless-N VPN Router)
- [CVE-2017-6624](https://cve.now/CVE-2017-6624.md): A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make u (no CVSS, Cisco CallManager Express)
- [CVE-2017-6625](https://cve.now/CVE-2017-6625.md): A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access con (no CVSS, Cisco Firepower Threat Defense and Cisco ASA with FirePOWER…)
- [CVE-2017-6626](https://cve.now/CVE-2017-6626.md): A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow (no CVSS, Cisco Finesse for Cisco Unified Contact Center Enterprise)
- [CVE-2017-6628](https://cve.now/CVE-2017-6628.md): A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow (no CVSS, Cisco Wide Area Application Services SMART-SSL Accelerator)
- [CVE-2017-6629](https://cve.now/CVE-2017-6629.md): A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files i (no CVSS, Cisco Unity Connection)
- [CVE-2017-5481](https://cve.now/CVE-2017-5481.md): Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a le (no CVSS)
- [CVE-2017-7229](https://cve.now/CVE-2017-7229.md): PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Co (no CVSS)
- [CVE-2017-7995](https://cve.now/CVE-2017-7995.md): Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads (no CVSS)
- [CVE-2016-0382](https://cve.now/CVE-2016-0382.md): The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captur (no CVSS, IBM Tealeaf Customer Experience)
- [CVE-2016-2930](https://cve.now/CVE-2016-2930.md): IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication. (no CVSS, IBM BigFix Remote Control)
- [CVE-2016-9976](https://cve.now/CVE-2016-9976.md): IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. (no CVSS, IBM Maximo Asset Management)
- [CVE-2017-5236](https://cve.now/CVE-2017-5236.md): Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the (no CVSS, Rapid7 AppSpider Pro)
- [CVE-2017-5240](https://cve.now/CVE-2017-5240.md): Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. (no CVSS, Rapid7 AppSpider Pro)
- [CVE-2017-8458](https://cve.now/CVE-2017-8458.md): Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear (no CVSS)
- [CVE-2017-8459](https://cve.now/CVE-2017-8459.md): Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. (CVSS 5.3)
- [CVE-2015-9057](https://cve.now/CVE-2015-9057.md): Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allow remote attackers to inject (no CVSS)
- [CVE-2015-9058](https://cve.now/CVE-2015-9058.md): Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote attackers to redirect users to arbitrary we (no CVSS)
- [CVE-2016-10367](https://cve.now/CVE-2016-10367.md): In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security (no CVSS)
- [CVE-2016-10368](https://cve.now/CVE-2016-10368.md): Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x with (no CVSS)
- [CVE-2017-7428](https://cve.now/CVE-2017-7428.md): NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat. (no CVSS, NetIQ iManager 3.x before)
- [CVE-2017-7430](https://cve.now/CVE-2017-7430.md): Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework. (no CVSS, Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…)
- [CVE-2017-7431](https://cve.now/CVE-2017-7431.md): Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management. (no CVSS, Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…)
- [CVE-2017-7432](https://cve.now/CVE-2017-7432.md): Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability. (no CVSS, Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ…)
- [CVE-2017-8453](https://cve.now/CVE-2017-8453.md): Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive informatio (no CVSS)
- [CVE-2017-8454](https://cve.now/CVE-2017-8454.md): Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive informatio (no CVSS)
- [CVE-2017-8455](https://cve.now/CVE-2017-8455.md): Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive informatio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.