# CVEs published 2017-11-05

4 CVEs were published on November 5, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-16545](https://cve.now/CVE-2017-16545.md): The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attack (no CVSS)
- [CVE-2017-16546](https://cve.now/CVE-2017-16546.md): The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allow (no CVSS)
- [CVE-2017-16542](https://cve.now/CVE-2017-16542.md): Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageAppl (no CVSS)
- [CVE-2017-16543](https://cve.now/CVE-2017-16543.md): Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewPro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.