# Vulnerabilities published in 2012


- [CVE-2012-0305](https://insights.sbomify.com/CVE-2012-0305/): Privilege escalation in symantec:backupexec system recovery (medium 4.4)
- [CVE-2012-0304](https://insights.sbomify.com/CVE-2012-0304/): Misconfiguration in symantec:liveupdate administrator (medium 6.9)
- [CVE-2012-0303](https://insights.sbomify.com/CVE-2012-0303/): Cross-site request forgery in symantec:message filter (medium 6.8)
- [CVE-2012-0302](https://insights.sbomify.com/CVE-2012-0302/): Cross-site scripting in symantec:message filter (medium 4.3)
- [CVE-2012-0301](https://insights.sbomify.com/CVE-2012-0301/): Auth bypass in symantec:message filter (medium 5.4)
- [CVE-2012-0300](https://insights.sbomify.com/CVE-2012-0300/): Information disclosure in symantec:message filter (low 3.3)
- [CVE-2012-0299](https://insights.sbomify.com/CVE-2012-0299/): File upload in symantec:web gateway (critical 10.0)
- [CVE-2012-0298](https://insights.sbomify.com/CVE-2012-0298/): Missing authorization in symantec:web gateway (medium 6.4)
- [CVE-2012-0297](https://insights.sbomify.com/CVE-2012-0297/): Missing authorization in symantec:web gateway (critical 10.0)
- [CVE-2012-0296](https://insights.sbomify.com/CVE-2012-0296/): Cross-site scripting in symantec:web gateway (medium 4.3)
- [CVE-2012-0295](https://insights.sbomify.com/CVE-2012-0295/): Code injection in symantec:endpoint protection (critical 9.3)
- [CVE-2012-0294](https://insights.sbomify.com/CVE-2012-0294/): Path traversal in symantec:endpoint protection (medium 5.8)
- [CVE-2012-0293](https://insights.sbomify.com/CVE-2012-0293/): SQL injection in symantec:altiris wise package studio (medium 6.8)
- [CVE-2012-0292](https://insights.sbomify.com/CVE-2012-0292/): Denial of service in symantec:altiris client management suite pcanywhere solution (medium 5.0)
- [CVE-2012-0291](https://insights.sbomify.com/CVE-2012-0291/): Denial of service in symantec:altiris client management suite pcanywhere solution (medium 5.0)
- [CVE-2012-0290](https://insights.sbomify.com/CVE-2012-0290/): Auth bypass in symantec:altiris client management suite pcanywhere solution (critical 10.0)
- [CVE-2012-0289](https://insights.sbomify.com/CVE-2012-0289/): Memory corruption in symantec:endpoint protection (high 7.2)
- [CVE-2012-0287](https://insights.sbomify.com/CVE-2012-0287/): Cross-site scripting in wordpress:wordpress (low 2.6)
- [CVE-2012-0286](https://insights.sbomify.com/CVE-2012-0286/): Cross-site request forgery in stone-ware:webnetwork (medium 6.8)
- [CVE-2012-0285](https://insights.sbomify.com/CVE-2012-0285/): Cross-site scripting in stone-ware:webnetwork (medium 4.3)
- [CVE-2012-0284](https://insights.sbomify.com/CVE-2012-0284/): Memory corruption in cisco:linksys playerpt activex control (critical 9.3)
- [CVE-2012-0283](https://insights.sbomify.com/CVE-2012-0283/): Cross-site scripting in andreas gohr:dokuwiki (medium 4.3)
- [CVE-2012-0282](https://insights.sbomify.com/CVE-2012-0282/): Memory corruption in xnview:xnview (medium 6.8)
- [CVE-2012-0279](https://insights.sbomify.com/CVE-2012-0279/): Misconfiguration in quest:toad for data analysts (medium 6.9)
- [CVE-2012-0278](https://insights.sbomify.com/CVE-2012-0278/): Memory corruption in irfanview:flashpix plugin (critical 9.3)
- [CVE-2012-0277](https://insights.sbomify.com/CVE-2012-0277/): Memory corruption in xnview:xnview (medium 6.8)
- [CVE-2012-0276](https://insights.sbomify.com/CVE-2012-0276/): Memory corruption in xnview:xnview (medium 6.8)
- [CVE-2012-0275](https://insights.sbomify.com/CVE-2012-0275/): Memory corruption in adobe:photoshop cs5.5 (critical 10.0)
- [CVE-2012-0273](https://insights.sbomify.com/CVE-2012-0273/): Memory corruption in hans alshoff:minalic (high 7.5)
- [CVE-2012-0272](https://insights.sbomify.com/CVE-2012-0272/): Cross-site scripting in novell:groupwise (medium 4.3)
- [CVE-2012-0271](https://insights.sbomify.com/CVE-2012-0271/): Integer overflow in novell:groupwise (critical 10.0)
- [CVE-2012-0270](https://insights.sbomify.com/CVE-2012-0270/): Memory corruption in csounds:csound (high 7.5)
- [CVE-2012-0269](https://insights.sbomify.com/CVE-2012-0269/): Memory corruption in justsystems:ichitaro (critical 9.3)
- [CVE-2012-0268](https://insights.sbomify.com/CVE-2012-0268/): Integer overflow in yahoo:messenger (medium 5.1)
- [CVE-2012-0267](https://insights.sbomify.com/CVE-2012-0267/): Memory corruption in ntrglobal:ntr activex control (critical 9.3)
- [CVE-2012-0266](https://insights.sbomify.com/CVE-2012-0266/): Memory corruption in ntrglobal:ntr activex control (critical 9.3)
- [CVE-2012-0265](https://insights.sbomify.com/CVE-2012-0265/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2012-0264](https://insights.sbomify.com/CVE-2012-0264/): Other in op5:monitor (critical 10.0)
- [CVE-2012-0263](https://insights.sbomify.com/CVE-2012-0263/): Information disclosure in op5:monitor (medium 4.0)
- [CVE-2012-0262](https://insights.sbomify.com/CVE-2012-0262/): Command injection in op5:monitor (critical 10.0)
- [CVE-2012-0261](https://insights.sbomify.com/CVE-2012-0261/): Command injection in op5:monitor (critical 10.0)
- [CVE-2012-0260](https://insights.sbomify.com/CVE-2012-0260/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2012-0259](https://insights.sbomify.com/CVE-2012-0259/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2012-0258](https://insights.sbomify.com/CVE-2012-0258/): Memory corruption in invensys:archestra application object toolkit (medium 6.8)
- [CVE-2012-0257](https://insights.sbomify.com/CVE-2012-0257/): Memory corruption in invensys:archestra application object toolkit (medium 6.8)
- [CVE-2012-0256](https://insights.sbomify.com/CVE-2012-0256/): Memory corruption in apache:traffic server (medium 5.0)
- [CVE-2012-0255](https://insights.sbomify.com/CVE-2012-0255/): Denial of service in quagga:quagga (medium 5.0)
- [CVE-2012-0254](https://insights.sbomify.com/CVE-2012-0254/): Memory corruption in honeywell:enterprise building manager (high 7.5)
- [CVE-2012-0253](https://insights.sbomify.com/CVE-2012-0253/): Cross-site scripting in demandmedia:pluck sitelife (medium 4.3)
- [CVE-2012-0250](https://insights.sbomify.com/CVE-2012-0250/): Memory corruption in quagga:quagga (low 3.3)
- [CVE-2012-0249](https://insights.sbomify.com/CVE-2012-0249/): Memory corruption in quagga:quagga (low 3.3)
- [CVE-2012-0248](https://insights.sbomify.com/CVE-2012-0248/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2012-0247](https://insights.sbomify.com/CVE-2012-0247/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2012-0246](https://insights.sbomify.com/CVE-2012-0246/): Path traversal in ecava:integraxor (critical 9.3)
- [CVE-2012-0245](https://insights.sbomify.com/CVE-2012-0245/): Memory corruption in abb:interlink module (critical 10.0)
- [CVE-2012-0244](https://insights.sbomify.com/CVE-2012-0244/): SQL injection in advantech:advantech webaccess (high 7.5)
- [CVE-2012-0243](https://insights.sbomify.com/CVE-2012-0243/): Memory corruption in advantech:advantech webaccess (critical 10.0)
- [CVE-2012-0242](https://insights.sbomify.com/CVE-2012-0242/): Memory corruption in advantech:advantech webaccess (critical 10.0)
- [CVE-2012-0241](https://insights.sbomify.com/CVE-2012-0241/): Memory corruption in advantech:advantech webaccess (medium 5.0)
- [CVE-2012-0240](https://insights.sbomify.com/CVE-2012-0240/): Auth bypass in advantech:advantech webaccess (critical 10.0)
- [CVE-2012-0239](https://insights.sbomify.com/CVE-2012-0239/): Auth bypass in advantech:advantech webaccess (medium 5.0)
- [CVE-2012-0238](https://insights.sbomify.com/CVE-2012-0238/): Memory corruption in advantech:advantech webaccess (critical 10.0)
- [CVE-2012-0237](https://insights.sbomify.com/CVE-2012-0237/): Missing authorization in advantech:advantech webaccess (medium 6.4)
- [CVE-2012-0236](https://insights.sbomify.com/CVE-2012-0236/): Information disclosure in advantech:advantech webaccess (medium 5.0)
- [CVE-2012-0235](https://insights.sbomify.com/CVE-2012-0235/): Cross-site request forgery in advantech:advantech webaccess (medium 6.0)
- [CVE-2012-0234](https://insights.sbomify.com/CVE-2012-0234/): SQL injection in advantech:advantech webaccess (high 7.5)
- [CVE-2012-0233](https://insights.sbomify.com/CVE-2012-0233/): Cross-site scripting in advantech:advantech webaccess (medium 4.3)
- [CVE-2012-0232](https://insights.sbomify.com/CVE-2012-0232/): Path traversal in ge:intelligent platforms proficy real-time information portal (medium 6.4)
- [CVE-2012-0231](https://insights.sbomify.com/CVE-2012-0231/): Memory corruption in ge:intelligent platforms proficy plant applications (critical 10.0)
- [CVE-2012-0230](https://insights.sbomify.com/CVE-2012-0230/): Memory corruption in ge:intelligent platforms proficy plant applications (critical 10.0)
- [CVE-2012-0229](https://insights.sbomify.com/CVE-2012-0229/): Memory corruption in ge:intelligent platforms proficy historian (critical 10.0)
- [CVE-2012-0228](https://insights.sbomify.com/CVE-2012-0228/): Security feature bypass in invensys:wonderware information server (high 7.5)
- [CVE-2012-0227](https://insights.sbomify.com/CVE-2012-0227/): Memory corruption in componentone:flexgrid (critical 9.3)
- [CVE-2012-0226](https://insights.sbomify.com/CVE-2012-0226/): SQL injection in invensys:wonderware information server (high 7.5)
- [CVE-2012-0225](https://insights.sbomify.com/CVE-2012-0225/): Cross-site scripting in invensys:wonderware information server (medium 4.3)
- [CVE-2012-0224](https://insights.sbomify.com/CVE-2012-0224/): Privilege escalation in 7t:aquis (critical 9.3)
- [CVE-2012-0223](https://insights.sbomify.com/CVE-2012-0223/): Privilege escalation in 7t:termis (critical 9.3)
- [CVE-2012-0222](https://insights.sbomify.com/CVE-2012-0222/): Memory corruption in rockwellautomation:factorytalk (medium 5.0)
- [CVE-2012-0221](https://insights.sbomify.com/CVE-2012-0221/): Denial of service in rockwellautomation:factorytalk (medium 5.0)
- [CVE-2012-0220](https://insights.sbomify.com/CVE-2012-0220/): Cross-site scripting in ikiwiki:ikiwiki (medium 4.3)
- [CVE-2012-0219](https://insights.sbomify.com/CVE-2012-0219/): Memory corruption in dest-unreach:socat (medium 6.2)
- [CVE-2012-0218](https://insights.sbomify.com/CVE-2012-0218/): Denial of service in xen:xen (low 1.9)
- [CVE-2012-0217](https://insights.sbomify.com/CVE-2012-0217/): Privilege escalation in citrix:xenserver (high 7.2)
- [CVE-2012-0216](https://insights.sbomify.com/CVE-2012-0216/): Misconfiguration in debian:debian linux (medium 4.4)
- [CVE-2012-0215](https://insights.sbomify.com/CVE-2012-0215/): Trytond allows modification of privileges of arbitrary users (medium 5.5)
- [CVE-2012-0214](https://insights.sbomify.com/CVE-2012-0214/): Security feature bypass in advanced package tool:advanced package tool (medium 4.3)
- [CVE-2012-0213](https://insights.sbomify.com/CVE-2012-0213/): Denial of Service in Apache POI (medium 5.0)
- [CVE-2012-0212](https://insights.sbomify.com/CVE-2012-0212/): Command injection in devscripts devel team:devscripts (critical 9.3)
- [CVE-2012-0211](https://insights.sbomify.com/CVE-2012-0211/): Command injection in devscripts devel team:devscripts (critical 9.3)
- [CVE-2012-0210](https://insights.sbomify.com/CVE-2012-0210/): Command injection in devscripts devel team:devscripts (critical 9.3)
- [CVE-2012-0209](https://insights.sbomify.com/CVE-2012-0209/): Supply chain in horde:groupware (high 7.5)
- [CVE-2012-0208](https://insights.sbomify.com/CVE-2012-0208/): Other in oracle:sun products suite (critical 9.0)
- [CVE-2012-0207](https://insights.sbomify.com/CVE-2012-0207/): Denial of service in linux:linux kernel (high 7.5)
- [CVE-2012-0206](https://insights.sbomify.com/CVE-2012-0206/): Denial of service in powerdns:authoritative server (medium 5.0)
- [CVE-2012-0205](https://insights.sbomify.com/CVE-2012-0205/): Missing authorization in ibm:infosphere information server (medium 6.5)
- [CVE-2012-0204](https://insights.sbomify.com/CVE-2012-0204/): Privilege escalation in ibm:infosphere import export manager (critical 9.3)
- [CVE-2012-0203](https://insights.sbomify.com/CVE-2012-0203/): Cross-site scripting in ibm:infosphere information server (medium 4.3)
- [CVE-2012-0202](https://insights.sbomify.com/CVE-2012-0202/): Memory corruption in ibm:cognos tm1 (critical 10.0)
- [CVE-2012-0201](https://insights.sbomify.com/CVE-2012-0201/): Memory corruption in ibm:personal communications (critical 9.3)
- [CVE-2012-0200](https://insights.sbomify.com/CVE-2012-0200/): Denial of service in ibm:soliddb (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/53/