CVEs published May 5, 2017
43 CVEs were published on May 5, 2017: 0 critical, 0 high.
- Published
- 43
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 43
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM WebSphere Cast Iron Cloud integration
- 2
- IBM Marketing Platform
- 1
- IBM WebSphere Portal
- 1
- Space Coast Credit Union Mobile
- 1
- Think Mutual Bank Mobile Banking
- 1
Medium, low and unrated 43
- CVE-2016-6877Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP
- CVE-2016-0255IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input.IBM Marketing Platform
- CVE-2016-8916IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set pas
- CVE-2016-9691IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) erIBM WebSphere Cast Iron Cloud integration
- CVE-2016-9692IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of usIBM WebSphere Cast Iron Cloud integration
- CVE-2017-1156IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM WebSphere Portal
- CVE-2017-8801Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a
- CVE-2017-8303An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8304An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8760An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8788An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8789An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8790An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8791An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8792An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8793An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8794An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8795An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8796An issue was discovered on Accellion FTA devices before FTA_9_12_180.
- CVE-2017-8799Untrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other iRODS users (potentially anonymous) to exe
- CVE-2017-8080Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors inv
- CVE-2017-6557SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users
- CVE-2017-3212The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which alSpace Coast Credit Union Mobile
- CVE-2017-3213The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle aThink Mutual Bank Mobile Banking
- CVE-2017-5901The State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-m
- CVE-2017-5902The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof serv
- CVE-2017-5905The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to sp
- CVE-2017-5906The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not verify X.509 certificates from SSL servers, w
- CVE-2017-5907The Great Southern Bank Great Southern Mobile Banking app before 4.0.4 for iOS does not verify X.509 certificates from SSL servers, which al
- CVE-2017-5909The Electronic Funds Source (EFS) Mobile Driver Source app 2.5 for iOS does not verify X.509 certificates from SSL servers, which allows man
- CVE-2017-5911The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-i
- CVE-2017-5912The FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509 certificates from SSL servers, which allows man
- CVE-2017-5913The TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attacke
- CVE-2017-5914The DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to s
- CVE-2017-5915The Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 (UAE) and 2.0.1 through 2.1.0 (KSA) for iOS does not verify X.509 c
- CVE-2017-5916The America's First Federal Credit Union (FCU) Mobile Banking app 3.1.0 for iOS does not verify X.509 certificates from SSL servers, which a
- CVE-2017-5918The Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attack
- CVE-2017-5919The 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers
- CVE-2017-8058Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically p
- CVE-2017-8059Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form, signature" before 5.4 for iOS allows a man-in-t
- CVE-2017-8060Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proxi
- CVE-2017-8787The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote
- CVE-2017-8786pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified ot