# CVEs published 2017-08-01 29 CVEs were published on August 1, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-8571](https://cve.now/CVE-2017-8571.md): Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows (no CVSS, Microsoft Office) - [CVE-2017-8572](https://cve.now/CVE-2017-8572.md): Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows (no CVSS, Microsoft Office) - [CVE-2017-8663](https://cve.now/CVE-2017-8663.md): Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows (no CVSS, Microsoft Office) - [CVE-2017-1500](https://cve.now/CVE-2017-1500.md): A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framew (no CVSS, IBM Worklight) - [CVE-2017-12132](https://cve.now/CVE-2017-12132.md): The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP re (no CVSS) - [CVE-2017-4921](https://cve.now/CVE-2017-4921.md): VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD\_LIBRARY\_PATH variabl (no CVSS) - [CVE-2017-4922](https://cve.now/CVE-2017-4922.md): VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable (no CVSS) - [CVE-2017-4923](https://cve.now/CVE-2017-4923.md): VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. (no CVSS) - [CVE-2017-11379](https://cve.now/CVE-2017-11379.md): Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1. (no CVSS, Trend Micro Deep Discovery Director) - [CVE-2017-11380](https://cve.now/CVE-2017-11380.md): Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be use (no CVSS, Trend Micro Deep Discovery Director) - [CVE-2017-11381](https://cve.now/CVE-2017-11381.md): A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can acc (no CVSS, Trend Micro Deep Discovery Director) - [CVE-2017-12061](https://cve.now/CVE-2017-12061.md): An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. (no CVSS, mantisbt/mantisbt) - [CVE-2017-12062](https://cve.now/CVE-2017-12062.md): An XSS issue was discovered in manage\_user\_page.php in MantisBT 2.x before 2.5.2. (no CVSS, mantisbt/mantisbt) - [CVE-2015-5059](https://cve.now/CVE-2015-5059.md): The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files ($g\_view\_proj\_doc\_threshold) is set t (no CVSS) - [CVE-2017-11129](https://cve.now/CVE-2017-11129.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. (no CVSS) - [CVE-2017-11130](https://cve.now/CVE-2017-11130.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. (no CVSS) - [CVE-2017-11131](https://cve.now/CVE-2017-11131.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. (no CVSS) - [CVE-2017-11132](https://cve.now/CVE-2017-11132.md): An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. (no CVSS) - [CVE-2017-11133](https://cve.now/CVE-2017-11133.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. (no CVSS) - [CVE-2017-11134](https://cve.now/CVE-2017-11134.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. (no CVSS) - [CVE-2017-11135](https://cve.now/CVE-2017-11135.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. (no CVSS) - [CVE-2017-11136](https://cve.now/CVE-2017-11136.md): An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. (no CVSS) - [CVE-2017-11552](https://cve.now/CVE-2017-11552.md): mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of s (no CVSS) - [CVE-2017-12064](https://cve.now/CVE-2017-12064.md): The csv\_log\_html function in library/edihistory/edih\_csv\_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restr (no CVSS) - [CVE-2017-12065](https://cve.now/CVE-2017-12065.md): spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end pa (no CVSS) - [CVE-2017-12066](https://cve.now/CVE-2017-12066.md): Cross-site scripting (XSS) vulnerability in aggregate\_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrar (no CVSS) - [CVE-2017-12067](https://cve.now/CVE-2017-12067.md): Potrace 1.14 has a heap-based buffer over-read in the interpolate\_cubic function in mkbitmap.c. (no CVSS) - [CVE-2017-12068](https://cve.now/CVE-2017-12068.md): The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el\_admin\_categories delete\_bulk ac (no CVSS) - [CVE-2017-12131](https://cve.now/CVE-2017-12131.md): The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonial (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-08-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.