# Vulnerabilities published in 2012


- [CVE-2012-1014](https://insights.sbomify.com/CVE-2012-1014/): Memory corruption in mit:kerberos 5 (critical 9.0)
- [CVE-2012-1013](https://insights.sbomify.com/CVE-2012-1013/): Null dereference in mit:kerberos 5 (medium 4.0)
- [CVE-2012-1012](https://insights.sbomify.com/CVE-2012-1012/): Missing authorization in mit:kerberos 5 (medium 5.5)
- [CVE-2012-1011](https://insights.sbomify.com/CVE-2012-1011/): File upload in likno:allwebmenus plugin (high 7.5)
- [CVE-2012-1010](https://insights.sbomify.com/CVE-2012-1010/): File upload in likno:allwebmenus plugin (high 7.5)
- [CVE-2012-1009](https://insights.sbomify.com/CVE-2012-1009/): Denial of service in netsarang:xlpd (medium 5.0)
- [CVE-2012-1008](https://insights.sbomify.com/CVE-2012-1008/): Denial of service in officesip:officesip server (medium 5.0)
- [CVE-2012-1007](https://insights.sbomify.com/CVE-2012-1007/): Cross-site scripting in apache:struts (medium 4.3)
- [CVE-2012-10064](https://insights.sbomify.com/CVE-2012-10064/): Omni Secure Files < 0.1.14 Unauthenticated Arbitrary File Upload (critical 9.3)
- [CVE-2012-10063](https://insights.sbomify.com/CVE-2012-10063/): Nagios XI < 2012R1.3 Authenticated SQL Injection in Legacy CCM (high 8.7)
- [CVE-2012-10062](https://insights.sbomify.com/CVE-2012-10062/): XAMPP WebDAV PHP Upload Authentication Bypass RCE (high 8.7)
- [CVE-2012-10061](https://insights.sbomify.com/CVE-2012-10061/): Sockso Music Host Server <= 1.5 Path Traversal (high 8.7)
- [CVE-2012-10060](https://insights.sbomify.com/CVE-2012-10060/): Sysax Multi Server < 5.55 SSH Username Buffer Overflow (critical 9.3)
- [CVE-2012-1006](https://insights.sbomify.com/CVE-2012-1006/): Apache Struts Multiple Cross-site Scripting Vulnerabilities (medium 4.3)
- [CVE-2012-10059](https://insights.sbomify.com/CVE-2012-10059/): Dolibarr ERP/CRM Post-Auth OS Command Injection (critical 9.4)
- [CVE-2012-10058](https://insights.sbomify.com/CVE-2012-10058/): RabidHamster R4 Log Entry sprintf() Buffer Overflow (critical 10.0)
- [CVE-2012-10057](https://insights.sbomify.com/CVE-2012-10057/): Lattice Semiconductor ispVM System 18.0.2 XCF File Handling Buffer Overflow (high 8.4)
- [CVE-2012-10056](https://insights.sbomify.com/CVE-2012-10056/): PHP Volunteer Management System 1.0.2 Arbitrary File Upload (high 8.7)
- [CVE-2012-10055](https://insights.sbomify.com/CVE-2012-10055/): ComSndFTP v1.3.7 Beta USER Format String RCE (critical 9.3)
- [CVE-2012-10054](https://insights.sbomify.com/CVE-2012-10054/): Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE (critical 9.3)
- [CVE-2012-10053](https://insights.sbomify.com/CVE-2012-10053/): Simple Web Server Connection Header Buffer Overflow (critical 9.3)
- [CVE-2012-10052](https://insights.sbomify.com/CVE-2012-10052/): EGallery 1.2 Arbitrary PHP File Upload (critical 9.3)
- [CVE-2012-10051](https://insights.sbomify.com/CVE-2012-10051/): Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow (high 8.4)
- [CVE-2012-10050](https://insights.sbomify.com/CVE-2012-10050/): CuteFlow <= 2.11.2 Arbitrary File Upload RCE (critical 9.3)
- [CVE-2012-1005](https://insights.sbomify.com/CVE-2012-1005/): Cross-site scripting in sphinx-soft:mobile web server (medium 4.3)
- [CVE-2012-10049](https://insights.sbomify.com/CVE-2012-10049/): WebPageTest Arbitrary PHP File Upload RCE (critical 9.3)
- [CVE-2012-10048](https://insights.sbomify.com/CVE-2012-10048/): Zenoss 3.x showDaemonXMLConfig Command Execution (high 8.7)
- [CVE-2012-10047](https://insights.sbomify.com/CVE-2012-10047/): Cyclope Employee Surveillance Solution v6.x SQL Injection (critical 10.0)
- [CVE-2012-10046](https://insights.sbomify.com/CVE-2012-10046/): E-Mail Security Virtual Appliance learn-msg.cgi Command Injection (critical 9.3)
- [CVE-2012-10045](https://insights.sbomify.com/CVE-2012-10045/): XODA 0.4.5 Arbitrary PHP File Upload (critical 9.3)
- [CVE-2012-10044](https://insights.sbomify.com/CVE-2012-10044/): MobileCartly 1.0 savepage.php Arbitrary File Creation (critical 10.0)
- [CVE-2012-10043](https://insights.sbomify.com/CVE-2012-10043/): ActFax 4.32 Client Importer Buffer Overflow (critical 9.3)
- [CVE-2012-10042](https://insights.sbomify.com/CVE-2012-10042/): Sflog! CMS 1.0 Arbitrary File Upload RCE (high 8.7)
- [CVE-2012-10041](https://insights.sbomify.com/CVE-2012-10041/): WAN Emulator v2.3 Command Execution (critical 9.3)
- [CVE-2012-10040](https://insights.sbomify.com/CVE-2012-10040/): Openfiler v2.x NetworkCard Command Execution (critical 9.4)
- [CVE-2012-1004](https://insights.sbomify.com/CVE-2012-1004/): Cross-site scripting in foswiki:foswiki (low 2.1)
- [CVE-2012-10039](https://insights.sbomify.com/CVE-2012-10039/): ZEN Load Balancer Filelog Command Execution (critical 9.4)
- [CVE-2012-10038](https://insights.sbomify.com/CVE-2012-10038/): Auxilium RateMyPet Arbitrary File Upload RCE (critical 9.3)
- [CVE-2012-10037](https://insights.sbomify.com/CVE-2012-10037/): PhpTax pfilez Parameter Exec Remote Code Injection (critical 9.3)
- [CVE-2012-10036](https://insights.sbomify.com/CVE-2012-10036/): Project Pier <= 0.8.8 Arbitrary File Upload RCE (critical 9.3)
- [CVE-2012-10035](https://insights.sbomify.com/CVE-2012-10035/): Turbo FTP Server 1.30.823/826 PORT Command Buffer Overflow (critical 10.0)
- [CVE-2012-10034](https://insights.sbomify.com/CVE-2012-10034/): ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie (high 8.7)
- [CVE-2012-10033](https://insights.sbomify.com/CVE-2012-10033/): Narcissus backend.php Image Configuration Command Injection (critical 9.3)
- [CVE-2012-10032](https://insights.sbomify.com/CVE-2012-10032/): Maxthon3 about:history XCS Trusted Zone Code Execution (high 8.7)
- [CVE-2012-10031](https://insights.sbomify.com/CVE-2012-10031/): BlazeVideo HDTV Player Pro 6.6.0.3 Filename Handling Buffer Overflow (high 8.6)
- [CVE-2012-10030](https://insights.sbomify.com/CVE-2012-10030/): FreeFloat FTP Server Arbitrary File Upload (critical 9.3)
- [CVE-2012-1003](https://insights.sbomify.com/CVE-2012-1003/): Integer overflow in opera:opera browser (medium 5.0)
- [CVE-2012-10029](https://insights.sbomify.com/CVE-2012-10029/): Nagios XI Network Monitor Graph Explorer Component < 1.3 Authenticated Command Injection (high 8.6)
- [CVE-2012-10028](https://insights.sbomify.com/CVE-2012-10028/): Netwin SurgeFTP <= v23c8 Authenticated RCE (high 8.6)
- [CVE-2012-10027](https://insights.sbomify.com/CVE-2012-10027/): WordPress Plugin WP-Property <= 1.35.0 PHP File Upload (critical 9.3)
- [CVE-2012-10026](https://insights.sbomify.com/CVE-2012-10026/): WordPress Plugin Asset-Manager <= 2.0 PHP File Upload (critical 10.0)
- [CVE-2012-10025](https://insights.sbomify.com/CVE-2012-10025/): WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion (critical 10.0)
- [CVE-2012-10024](https://insights.sbomify.com/CVE-2012-10024/): XBMC ≤ 11.0 Web Server Path Traversal (high 7.1)
- [CVE-2012-10023](https://insights.sbomify.com/CVE-2012-10023/): FreeFloat FTP Server USER Command Buffer Overflow (medium 6.9)
- [CVE-2012-10022](https://insights.sbomify.com/CVE-2012-10022/): Kloxo <= 6.1.12 Local Privilege Escalation (high 8.5)
- [CVE-2012-10021](https://insights.sbomify.com/CVE-2012-10021/): D-Link DIR-605L Captcha Handling Buffer Overflow (critical 9.3)
- [CVE-2012-10020](https://insights.sbomify.com/CVE-2012-10020/): FoxyPress <= 0.4.2.1 - Arbitrary File Upload (critical 9.8)
- [CVE-2012-1002](https://insights.sbomify.com/CVE-2012-1002/): SQL injection in zakongroup:openconf (critical 10.0)
- [CVE-2012-10019](https://insights.sbomify.com/CVE-2012-10019/): Front-end Editor < 2.3 - Arbitrary File Upload (critical 9.8)
- [CVE-2012-10018](https://insights.sbomify.com/CVE-2012-10018/): Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting (high 8.3)
- [CVE-2012-10017](https://insights.sbomify.com/CVE-2012-10017/): BestWebSoft Portfolio Plugin cross-site request forgery (medium 4.3)
- [CVE-2012-10016](https://insights.sbomify.com/CVE-2012-10016/): Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure (medium 4.3)
- [CVE-2012-10015](https://insights.sbomify.com/CVE-2012-10015/): BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery (medium 4.3)
- [CVE-2012-10014](https://insights.sbomify.com/CVE-2012-10014/): Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting (low 3.5)
- [CVE-2012-10013](https://insights.sbomify.com/CVE-2012-10013/): Kau-Boy Backend Localization Plugin backend_localization.php cross site scripting (low 3.5)
- [CVE-2012-10012](https://insights.sbomify.com/CVE-2012-10012/): BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery (medium 4.3)
- [CVE-2012-10011](https://insights.sbomify.com/CVE-2012-10011/): HD FLV PLayer Plugin functions.php hd_update_media sql injection (medium 6.3)
- [CVE-2012-10010](https://insights.sbomify.com/CVE-2012-10010/): BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery (medium 4.3)
- [CVE-2012-1001](https://insights.sbomify.com/CVE-2012-1001/): Cross-site scripting in chyrp:chyrp (medium 6.1)
- [CVE-2012-10009](https://insights.sbomify.com/CVE-2012-10009/): 404like Plugin 404Like.php checkPage sql injection (high 7.3)
- [CVE-2012-10008](https://insights.sbomify.com/CVE-2012-10008/): uakfdotb oneapp sql injection (medium 6.3)
- [CVE-2012-10007](https://insights.sbomify.com/CVE-2012-10007/): madgicweb BuddyStream Plugin ShareBox.php cross site scripting (low 3.5)
- [CVE-2012-10006](https://insights.sbomify.com/CVE-2012-10006/): ale7714 sigeprosi sql injection (medium 5.5)
- [CVE-2012-10005](https://insights.sbomify.com/CVE-2012-10005/): manikandan170890 php-form-builder-class Textarea Textarea.php cross site scripting (low 3.5)
- [CVE-2012-10004](https://insights.sbomify.com/CVE-2012-10004/): backdrop-contrib Basic Cart basic_cart.cart.inc basic_cart_checkout_form_submit cross site scripting (low 3.5)
- [CVE-2012-10003](https://insights.sbomify.com/CVE-2012-10003/): ahmyi RivetTracker cross site scripting (low 3.5)
- [CVE-2012-10002](https://insights.sbomify.com/CVE-2012-10002/): ahmyi RivetTracker css.php changeColor cross site scripting (low 3.5)
- [CVE-2012-10001](https://insights.sbomify.com/CVE-2012-10001/): Auth bypass in limit login attempts project:limit login attempts (critical 9.8)
- [CVE-2012-1000](https://insights.sbomify.com/CVE-2012-1000/): Cross-site scripting in lepton-cms:lepton (medium 4.3)
- [CVE-2012-0999](https://insights.sbomify.com/CVE-2012-0999/): SQL injection in lepton-cms:lepton (high 7.5)
- [CVE-2012-0998](https://insights.sbomify.com/CVE-2012-0998/): Path traversal in lepton-cms:lepton (high 7.5)
- [CVE-2012-0997](https://insights.sbomify.com/CVE-2012-0997/): Cross-site request forgery in 11in1:11in1 (medium 6.8)
- [CVE-2012-0996](https://insights.sbomify.com/CVE-2012-0996/): Path traversal in 11in1:11in1 (medium 5.0)
- [CVE-2012-0995](https://insights.sbomify.com/CVE-2012-0995/): Cross-site scripting in zenphoto:zenphoto (medium 4.3)
- [CVE-2012-0994](https://insights.sbomify.com/CVE-2012-0994/): SQL injection in zenphoto:zenphoto (medium 6.0)
- [CVE-2012-0993](https://insights.sbomify.com/CVE-2012-0993/): Code injection in zenphoto:zenphoto (medium 6.8)
- [CVE-2012-0992](https://insights.sbomify.com/CVE-2012-0992/): Command injection in openemr:openemr (high 8.5)
- [CVE-2012-0991](https://insights.sbomify.com/CVE-2012-0991/): Path traversal in openemr:openemr (low 3.5)
- [CVE-2012-0990](https://insights.sbomify.com/CVE-2012-0990/): Cross-site request forgery in dclassifieds:dclassifieds (low 3.5)
- [CVE-2012-0989](https://insights.sbomify.com/CVE-2012-0989/): Cross-site scripting in oneorzero:action and information management system (medium 4.3)
- [CVE-2012-0988](https://insights.sbomify.com/CVE-2012-0988/): Cross-site scripting in jam warehouse:knowledgetree open source (medium 4.3)
- [CVE-2012-0987](https://insights.sbomify.com/CVE-2012-0987/): Path traversal in impresscms:impresscms (medium 6.0)
- [CVE-2012-0986](https://insights.sbomify.com/CVE-2012-0986/): Cross-site scripting in impresscms:impresscms (medium 4.3)
- [CVE-2012-0985](https://insights.sbomify.com/CVE-2012-0985/): Memory corruption in sony:smartwi connection utillity (critical 9.3)
- [CVE-2012-0984](https://insights.sbomify.com/CVE-2012-0984/): Cross-site scripting in xoops:xoops (medium 4.3)
- [CVE-2012-0983](https://insights.sbomify.com/CVE-2012-0983/): SQL injection in scriptsez:ez album (high 7.5)
- [CVE-2012-0982](https://insights.sbomify.com/CVE-2012-0982/): SQL injection in vastal:agent zone (high 7.5)
- [CVE-2012-0981](https://insights.sbomify.com/CVE-2012-0981/): Path traversal in kybernetika:phpshowtime (medium 5.0)
- [CVE-2012-0980](https://insights.sbomify.com/CVE-2012-0980/): SQL injection in phux:download manager (high 7.5)
- [CVE-2012-0979](https://insights.sbomify.com/CVE-2012-0979/): Cross-site scripting in twiki:twiki (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/46/