# CVEs published 2017-08-03

13 CVEs were published on August 3, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11382](https://cve.now/CVE-2017-11382.md): Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vul (no CVSS, Trend Micro Deep Discovery Email Inspector)
- [CVE-2017-11391](https://cve.now/CVE-2017-11391.md): Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute ar (no CVSS, Trend Micro InterScan Messaging Security Virtual Appliance)
- [CVE-2017-11392](https://cve.now/CVE-2017-11392.md): Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute ar (no CVSS, Trend Micro InterScan Messaging Security Virtual Appliance)
- [CVE-2017-11393](https://cve.now/CVE-2017-11393.md): Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerab (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-11394](https://cve.now/CVE-2017-11394.md): Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerab (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-1199](https://cve.now/CVE-2017-1199.md): IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2017-12414](https://cve.now/CVE-2017-12414.md): Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwma (no CVSS)
- [CVE-2017-1327](https://cve.now/CVE-2017-1327.md): IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. (no CVSS, IBM iNotes)
- [CVE-2017-1504](https://cve.now/CVE-2017-1504.md): IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable (no CVSS, IBM WebSphere Application Server)
- [CVE-2017-11105](https://cve.now/CVE-2017-11105.md): The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a certificate. (no CVSS)
- [CVE-2017-11320](https://cve.now/CVE-2017-11320.md): Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoni (no CVSS)
- [CVE-2017-11721](https://cve.now/CVE-2017-11721.md): Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unsp (no CVSS)
- [CVE-2017-7442](https://cve.now/CVE-2017-7442.md): Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.