# CVEs published 2018-06-30

4 CVEs were published on June 30, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-12990](https://cve.now/CVE-2018-12990.md): phpwcms 1.8.9 allows remote attackers to discover the installation path via an invalid csrf\_token\_value field. (no CVSS)
- [CVE-2018-7475](https://cve.now/CVE-2018-7475.md): Cross-site scripting (XSS) vulnerability for webdav/ticket/ URIs in IceWarp Mail Server 12.0.3 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2018-13026](https://cve.now/CVE-2018-13026.md): An issue was discovered in gpmf-parser 1.1.2. (no CVSS)
- [CVE-2018-13030](https://cve.now/CVE-2018-13030.md): An issue was discovered in jpeg-compressor 0.1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-06-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.