# CVEs published 2017-08-21 18 CVEs were published on August 21, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-8037](https://cve.now/CVE-2017-8037.md): In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, th (no CVSS, Cloud Foundry) - [CVE-2017-6329](https://cve.now/CVE-2017-6329.md): Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. (no CVSS, Symantec VIP Access for Desktop) - [CVE-2017-5187](https://cve.now/CVE-2017-5187.md): A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterp (no CVSS, Micro Focus Enterprise Developer, Micro Focus Enterprise Se…) - [CVE-2017-7420](https://cve.now/CVE-2017-7420.md): An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer an (no CVSS, Micro Focus Enterprise Developer, Micro Focus Enterprise Se…) - [CVE-2017-7421](https://cve.now/CVE-2017-7421.md): Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) an (no CVSS, Micro Focus Enterprise Developer, Micro Focus Enterprise Se…) - [CVE-2017-7422](https://cve.now/CVE-2017-7422.md): Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Se (no CVSS, Micro Focus Enterprise Developer, Micro Focus Enterprise Se…) - [CVE-2017-7423](https://cve.now/CVE-2017-7423.md): A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Updat (no CVSS, Micro Focus Enterprise Developer, Micro Focus Enterprise Se…) - [CVE-2017-7424](https://cve.now/CVE-2017-7424.md): A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Ho (no CVSS, Micro Focus Enterprise Developer, Micro Focus Enterprise Se…) - [CVE-2017-12784](https://cve.now/CVE-2017-12784.md): In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash th (no CVSS) - [CVE-2017-12978](https://cve.now/CVE-2017-12978.md): lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user. (no CVSS) - [CVE-2017-12979](https://cve.now/CVE-2017-12979.md): DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. (no CVSS) - [CVE-2017-12980](https://cve.now/CVE-2017-12980.md): DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. (no CVSS) - [CVE-2017-12981](https://cve.now/CVE-2017-12981.md): NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action. (no CVSS) - [CVE-2017-12982](https://cve.now/CVE-2017-12982.md): The bmp\_read\_info\_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows rem (no CVSS) - [CVE-2017-12983](https://cve.now/CVE-2017-12983.md): Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of (no CVSS) - [CVE-2017-12984](https://cve.now/CVE-2017-12984.md): PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message\_update.php. (no CVSS) - [CVE-2017-11366](https://cve.now/CVE-2017-11366.md): components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be (no CVSS, codiad/codiad) - [CVE-2017-12977](https://cve.now/CVE-2017-12977.md): The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-08-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.