# CVEs published 2017-05-14

4 CVEs were published on May 14, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7487](https://cve.now/CVE-2017-7487.md): The ipxitf\_ioctl function in net/ipx/af\_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to ca (no CVSS, Linux kernel through)
- [CVE-2017-8928](https://cve.now/CVE-2017-8928.md): mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF. (no CVSS)
- [CVE-2017-8929](https://cve.now/CVE-2017-8929.md): The sized\_string\_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and a (no CVSS)
- [CVE-2017-8930](https://cve.now/CVE-2017-8930.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authenticat (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.