# Vulnerabilities published in 2017


- [CVE-2017-14376](https://insights.sbomify.com/CVE-2017-14376/): Hardcoded credentials in EMC AppSync Server versions prior to 3.5.0.1 (high 7.8)
- [CVE-2017-14375](https://insights.sbomify.com/CVE-2017-14375/): Auth bypass in EMC VMAX Virtual Appliance (vApp) EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.15, EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.15, EMC VASA Virtual Appliance versions prior to 8.4.0.512, EMC VMAX Embedded Management (eManagement) versions prior to and including 1.4 (Enginuity Release 5977.1125.1125 and earlier) (critical 9.8)
- [CVE-2017-14374](https://insights.sbomify.com/CVE-2017-14374/): Hardcoded credentials in Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20 (critical 9.8)
- [CVE-2017-14373](https://insights.sbomify.com/CVE-2017-14373/): Cross-site scripting in RSA Authentication Manager 8.2 SP1 P4 and earlier (medium 6.1)
- [CVE-2017-14372](https://insights.sbomify.com/CVE-2017-14372/): Cross-site scripting in RSA Archer GRC Platform prior to 6.2.0.5 (medium 6.1)
- [CVE-2017-14371](https://insights.sbomify.com/CVE-2017-14371/): Cross-site scripting in RSA Archer GRC Platform prior to 6.2.0.5 (medium 6.1)
- [CVE-2017-14370](https://insights.sbomify.com/CVE-2017-14370/): Cross-site scripting in RSA Archer GRC Platform versions prior to 6.2.0.5 (medium 5.4)
- [CVE-2017-14369](https://insights.sbomify.com/CVE-2017-14369/): Privilege escalation in RSA Archer GRC Platform prior to 6.2.0.5 (medium 4.3)
- [CVE-2017-14363](https://insights.sbomify.com/CVE-2017-14363/): MFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS) (medium 5.9)
- [CVE-2017-14362](https://insights.sbomify.com/CVE-2017-14362/): MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities (high 7.3)
- [CVE-2017-14361](https://insights.sbomify.com/CVE-2017-14361/): MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities (high 7.4)
- [CVE-2017-14360](https://insights.sbomify.com/CVE-2017-14360/): MFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS) (medium 5.9)
- [CVE-2017-14359](https://insights.sbomify.com/CVE-2017-14359/): MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS) (medium 5.4)
- [CVE-2017-14358](https://insights.sbomify.com/CVE-2017-14358/): Open redirect in HP ArcSight ESM (medium 6.1)
- [CVE-2017-14357](https://insights.sbomify.com/CVE-2017-14357/): Cross-site scripting in HP ArcSight ESM (medium 6.1)
- [CVE-2017-14356](https://insights.sbomify.com/CVE-2017-14356/): SQL injection in HP ArcSight ESM (critical 9.8)
- [CVE-2017-14355](https://insights.sbomify.com/CVE-2017-14355/): Privilege escalation in microfocus:connected backup (high 7.8)
- [CVE-2017-14354](https://insights.sbomify.com/CVE-2017-14354/): Cross-site scripting in hp:ucmdb foundation software (medium 6.1)
- [CVE-2017-14353](https://insights.sbomify.com/CVE-2017-14353/): Code injection in hp:ucmdb foundation software (high 8.8)
- [CVE-2017-14352](https://insights.sbomify.com/CVE-2017-14352/): Cross-site scripting in hp:ucmdb configuration manager (medium 6.1)
- [CVE-2017-14351](https://insights.sbomify.com/CVE-2017-14351/): Other in hp:ucmdb configuration manager (critical 9.8)
- [CVE-2017-14350](https://insights.sbomify.com/CVE-2017-14350/): Auth bypass in HPE Application Performance Management (APM) (critical 9.8)
- [CVE-2017-14349](https://insights.sbomify.com/CVE-2017-14349/): Privilege escalation in hp:sitescope (critical 9.8)
- [CVE-2017-14348](https://insights.sbomify.com/CVE-2017-14348/): Memory corruption in libraw:libraw (high 8.8)
- [CVE-2017-14347](https://insights.sbomify.com/CVE-2017-14347/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-14346](https://insights.sbomify.com/CVE-2017-14346/): File upload in blog project:blog (critical 9.8)
- [CVE-2017-14345](https://insights.sbomify.com/CVE-2017-14345/): SQL injection in blog project:blog (critical 9.8)
- [CVE-2017-14344](https://insights.sbomify.com/CVE-2017-14344/): Memory corruption in jungo:windriver (high 7.8)
- [CVE-2017-14343](https://insights.sbomify.com/CVE-2017-14343/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14342](https://insights.sbomify.com/CVE-2017-14342/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14341](https://insights.sbomify.com/CVE-2017-14341/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14340](https://insights.sbomify.com/CVE-2017-14340/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2017-1434](https://insights.sbomify.com/CVE-2017-1434/): Information disclosure in DB2 for Linux, UNIX and Windows (medium 4.7)
- [CVE-2017-14339](https://insights.sbomify.com/CVE-2017-14339/): Denial of service in yadifa:yadifa (high 7.5)
- [CVE-2017-14337](https://insights.sbomify.com/CVE-2017-14337/): Auth bypass in misp-project:misp (high 8.1)
- [CVE-2017-14335](https://insights.sbomify.com/CVE-2017-14335/): Missing authorization in hbgk:7204xr firmware (high 7.5)
- [CVE-2017-14333](https://insights.sbomify.com/CVE-2017-14333/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-14332](https://insights.sbomify.com/CVE-2017-14332/): Auth bypass in extremenetworks:extremexos (high 8.1)
- [CVE-2017-14331](https://insights.sbomify.com/CVE-2017-14331/): Security feature bypass in extremenetworks:extremexos (medium 6.7)
- [CVE-2017-14330](https://insights.sbomify.com/CVE-2017-14330/): Privilege escalation in extremenetworks:extremexos (medium 6.7)
- [CVE-2017-1433](https://insights.sbomify.com/CVE-2017-1433/): Denial of service in MQ (medium 6.5)
- [CVE-2017-14329](https://insights.sbomify.com/CVE-2017-14329/): Privilege escalation in extremenetworks:extremexos (medium 6.7)
- [CVE-2017-14328](https://insights.sbomify.com/CVE-2017-14328/): Memory corruption in extremenetworks:extremexos (high 7.5)
- [CVE-2017-14327](https://insights.sbomify.com/CVE-2017-14327/): Information disclosure in extremenetworks:extremexos (medium 4.4)
- [CVE-2017-14326](https://insights.sbomify.com/CVE-2017-14326/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14325](https://insights.sbomify.com/CVE-2017-14325/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14324](https://insights.sbomify.com/CVE-2017-14324/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-14323](https://insights.sbomify.com/CVE-2017-14323/): Server-side request forgery in onethink:onethink (critical 9.8)
- [CVE-2017-14322](https://insights.sbomify.com/CVE-2017-14322/): Auth bypass in interspire:email marketer (critical 9.8)
- [CVE-2017-14321](https://insights.sbomify.com/CVE-2017-14321/): Cross-site scripting in mirasvit:helpdesk mx (medium 5.4)
- [CVE-2017-14320](https://insights.sbomify.com/CVE-2017-14320/): File upload in mirasvit:helpdesk mx (high 8.0)
- [CVE-2017-14319](https://insights.sbomify.com/CVE-2017-14319/): Other in xen:xen (high 8.8)
- [CVE-2017-14318](https://insights.sbomify.com/CVE-2017-14318/): Null dereference in xen:xen (medium 6.5)
- [CVE-2017-14317](https://insights.sbomify.com/CVE-2017-14317/): Race condition in xen:xen (medium 5.6)
- [CVE-2017-14316](https://insights.sbomify.com/CVE-2017-14316/): Memory corruption in xen:xen (high 8.8)
- [CVE-2017-14315](https://insights.sbomify.com/CVE-2017-14315/): Memory corruption in apple:iphone os (high 7.5)
- [CVE-2017-14314](https://insights.sbomify.com/CVE-2017-14314/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2017-14313](https://insights.sbomify.com/CVE-2017-14313/): Cross-site scripting in shibboleth project:shibboleth (medium 6.1)
- [CVE-2017-14312](https://insights.sbomify.com/CVE-2017-14312/): Privilege escalation in nagios:nagios core (high 7.8)
- [CVE-2017-14311](https://insights.sbomify.com/CVE-2017-14311/): Privilege escalation in netmechanica:netdecision (high 7.8)
- [CVE-2017-14310](https://insights.sbomify.com/CVE-2017-14310/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-1431](https://insights.sbomify.com/CVE-2017-1431/): Cross-site scripting in Streams (medium 5.4)
- [CVE-2017-14309](https://insights.sbomify.com/CVE-2017-14309/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14308](https://insights.sbomify.com/CVE-2017-14308/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14307](https://insights.sbomify.com/CVE-2017-14307/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14306](https://insights.sbomify.com/CVE-2017-14306/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14305](https://insights.sbomify.com/CVE-2017-14305/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14304](https://insights.sbomify.com/CVE-2017-14304/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14303](https://insights.sbomify.com/CVE-2017-14303/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14302](https://insights.sbomify.com/CVE-2017-14302/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14301](https://insights.sbomify.com/CVE-2017-14301/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14300](https://insights.sbomify.com/CVE-2017-14300/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14299](https://insights.sbomify.com/CVE-2017-14299/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14298](https://insights.sbomify.com/CVE-2017-14298/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14297](https://insights.sbomify.com/CVE-2017-14297/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14296](https://insights.sbomify.com/CVE-2017-14296/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14295](https://insights.sbomify.com/CVE-2017-14295/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14294](https://insights.sbomify.com/CVE-2017-14294/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14293](https://insights.sbomify.com/CVE-2017-14293/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14292](https://insights.sbomify.com/CVE-2017-14292/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14291](https://insights.sbomify.com/CVE-2017-14291/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14290](https://insights.sbomify.com/CVE-2017-14290/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-1429](https://insights.sbomify.com/CVE-2017-1429/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2017-14289](https://insights.sbomify.com/CVE-2017-14289/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14288](https://insights.sbomify.com/CVE-2017-14288/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14287](https://insights.sbomify.com/CVE-2017-14287/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14286](https://insights.sbomify.com/CVE-2017-14286/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14285](https://insights.sbomify.com/CVE-2017-14285/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14284](https://insights.sbomify.com/CVE-2017-14284/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14283](https://insights.sbomify.com/CVE-2017-14283/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14282](https://insights.sbomify.com/CVE-2017-14282/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14281](https://insights.sbomify.com/CVE-2017-14281/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14280](https://insights.sbomify.com/CVE-2017-14280/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-1428](https://insights.sbomify.com/CVE-2017-1428/): Other in Cognos Analytics (medium 6.1)
- [CVE-2017-14279](https://insights.sbomify.com/CVE-2017-14279/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14278](https://insights.sbomify.com/CVE-2017-14278/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14277](https://insights.sbomify.com/CVE-2017-14277/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14276](https://insights.sbomify.com/CVE-2017-14276/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14275](https://insights.sbomify.com/CVE-2017-14275/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14274](https://insights.sbomify.com/CVE-2017-14274/): Memory corruption in xnview:xnview (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/102/