# CVEs published 2017-07-22

13 CVEs were published on July 22, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11522](https://cve.now/CVE-2017-11522.md): The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a deni (no CVSS)
- [CVE-2017-11523](https://cve.now/CVE-2017-11523.md): The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2017-7336](https://cve.now/CVE-2017-7336.md): A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands w (no CVSS, Fortinet FortiWLM)
- [CVE-2017-3221](https://cve.now/CVE-2017-3221.md): Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwo (no CVSS, Inmarsat AmosConnect)
- [CVE-2017-3222](https://cve.now/CVE-2017-3222.md): Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute comm (no CVSS, Inmarsat AmosConnect)
- [CVE-2017-11521](https://cve.now/CVE-2017-11521.md): The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a den (no CVSS)
- [CVE-2016-10400](https://cve.now/CVE-2016-10400.md): Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/\_core/courses/users/create\_course.php. (no CVSS)
- [CVE-2017-2126](https://cve.now/CVE-2017-2126.md): WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and (no CVSS, BUFFALO WAPM-1166D · BUFFALO WAPM-APG600H)
- [CVE-2017-2273](https://cve.now/CVE-2017-2273.md): Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remo (no CVSS, BUFFALO WMR-433 · BUFFALO WMR-433W)
- [CVE-2017-2274](https://cve.now/CVE-2017-2274.md): Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers (no CVSS, BUFFALO WMR-433 · BUFFALO WMR-433W)
- [CVE-2017-2275](https://cve.now/CVE-2017-2275.md): WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. (no CVSS, Sony WG-C10)
- [CVE-2017-2276](https://cve.now/CVE-2017-2276.md): Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. (no CVSS, Sony WG-C10)
- [CVE-2017-2277](https://cve.now/CVE-2017-2277.md): WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage co (no CVSS, Sony WG-C10)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.