# Vulnerabilities published in 2017


- [CVE-2017-1282](https://insights.sbomify.com/CVE-2017-1282/): Cross-site scripting in Content Navigator (medium 5.4)
- [CVE-2017-12819](https://insights.sbomify.com/CVE-2017-12819/): Auth bypass in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE (critical 9.8)
- [CVE-2017-12818](https://insights.sbomify.com/CVE-2017-12818/): Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE (high 7.5)
- [CVE-2017-12817](https://insights.sbomify.com/CVE-2017-12817/): Information disclosure in Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622 (high 7.5)
- [CVE-2017-12816](https://insights.sbomify.com/CVE-2017-12816/): Missing authorization in Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622 (critical 9.8)
- [CVE-2017-12815](https://insights.sbomify.com/CVE-2017-12815/): Path traversal in bomgar:remote support (critical 10.0)
- [CVE-2017-12814](https://insights.sbomify.com/CVE-2017-12814/): Memory corruption in perl:perl (critical 9.8)
- [CVE-2017-12813](https://insights.sbomify.com/CVE-2017-12813/): Cross-site scripting in stivasoft:phpjabbers file sharing script (medium 6.1)
- [CVE-2017-12812](https://insights.sbomify.com/CVE-2017-12812/): Cross-site scripting in stivasoft:phpjabbers night club booking software (medium 6.1)
- [CVE-2017-12811](https://insights.sbomify.com/CVE-2017-12811/): Cross-site scripting in stivasoft:phpjabbers star rating script (medium 6.1)
- [CVE-2017-12810](https://insights.sbomify.com/CVE-2017-12810/): Cross-site scripting in stivasoft:phpjabbers newsletter script (medium 6.1)
- [CVE-2017-1281](https://insights.sbomify.com/CVE-2017-1281/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-12809](https://insights.sbomify.com/CVE-2017-12809/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2017-12806](https://insights.sbomify.com/CVE-2017-12806/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12805](https://insights.sbomify.com/CVE-2017-12805/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12804](https://insights.sbomify.com/CVE-2017-12804/): Denial of service in entropymine:imageworsener (medium 6.5)
- [CVE-2017-12803](https://insights.sbomify.com/CVE-2017-12803/): Null dereference in matroska:mkclean (medium 6.5)
- [CVE-2017-12802](https://insights.sbomify.com/CVE-2017-12802/): Denial of service in matroska:libebml2 (medium 6.5)
- [CVE-2017-12801](https://insights.sbomify.com/CVE-2017-12801/): Denial of service in matroska:libebml2 (medium 6.5)
- [CVE-2017-12800](https://insights.sbomify.com/CVE-2017-12800/): Null dereference in matroska:libebml2 (medium 6.5)
- [CVE-2017-1280](https://insights.sbomify.com/CVE-2017-1280/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-12799](https://insights.sbomify.com/CVE-2017-12799/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12798](https://insights.sbomify.com/CVE-2017-12798/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-12797](https://insights.sbomify.com/CVE-2017-12797/): Integer overflow in mpg123:mpg123 (medium 5.5)
- [CVE-2017-12796](https://insights.sbomify.com/CVE-2017-12796/): Deserialization in openmrs:openmrs (critical 9.8)
- [CVE-2017-12795](https://insights.sbomify.com/CVE-2017-12795/): Other in openmrs:openmrs-module-htmlformentry (critical 9.8)
- [CVE-2017-12794](https://insights.sbomify.com/CVE-2017-12794/): Django vulnerable to XSS on 500 pages (medium 6.1)
- [CVE-2017-12792](https://insights.sbomify.com/CVE-2017-12792/): Cross-site request forgery in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-12791](https://insights.sbomify.com/CVE-2017-12791/): SaltStack Salt Directory traversal vulnerability in minion id validation (critical 9.8)
- [CVE-2017-12790](https://insights.sbomify.com/CVE-2017-12790/): Cross-site request forgery in metinfo:metinfo (medium 6.5)
- [CVE-2017-1279](https://insights.sbomify.com/CVE-2017-1279/): Path traversal in Tealeaf Customer Experience (medium 6.5)
- [CVE-2017-12789](https://insights.sbomify.com/CVE-2017-12789/): Cross-site request forgery in metinfo:metinfo (high 8.8)
- [CVE-2017-12788](https://insights.sbomify.com/CVE-2017-12788/): Cross-site scripting in metinfo:metinfo (medium 6.1)
- [CVE-2017-12787](https://insights.sbomify.com/CVE-2017-12787/): Memory corruption in noviflow:noviware (critical 9.8)
- [CVE-2017-12786](https://insights.sbomify.com/CVE-2017-12786/): Memory corruption in noviflow:noviware (critical 9.8)
- [CVE-2017-12785](https://insights.sbomify.com/CVE-2017-12785/): Memory corruption in noviflow:noviware (critical 9.8)
- [CVE-2017-12784](https://insights.sbomify.com/CVE-2017-12784/): Denial of service in ccfile:cc file transfer (high 7.5)
- [CVE-2017-12783](https://insights.sbomify.com/CVE-2017-12783/): Denial of service in matroska:libebml2 (medium 6.5)
- [CVE-2017-12782](https://insights.sbomify.com/CVE-2017-12782/): Denial of service in matroska:libebml2 (medium 6.5)
- [CVE-2017-12781](https://insights.sbomify.com/CVE-2017-12781/): Null dereference in matroska:libebml2 (medium 6.5)
- [CVE-2017-12780](https://insights.sbomify.com/CVE-2017-12780/): Memory corruption in matroska:libebml2 (medium 6.5)
- [CVE-2017-1278](https://insights.sbomify.com/CVE-2017-1278/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-12779](https://insights.sbomify.com/CVE-2017-12779/): Null dereference in matroska:mkvalidator (medium 6.5)
- [CVE-2017-12778](https://insights.sbomify.com/CVE-2017-12778/): Auth bypass in qbittorrent:qbittorrent (high 7.1)
- [CVE-2017-12777](https://insights.sbomify.com/CVE-2017-12777/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-12776](https://insights.sbomify.com/CVE-2017-12776/): SQL injection in nexusphp project:nexusphp (critical 9.8)
- [CVE-2017-12775](https://insights.sbomify.com/CVE-2017-12775/): Business logic in question2answer:question2answer (high 7.5)
- [CVE-2017-12774](https://insights.sbomify.com/CVE-2017-12774/): SQL injection in finecms project:finecms (critical 9.8)
- [CVE-2017-1277](https://insights.sbomify.com/CVE-2017-1277/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-12763](https://insights.sbomify.com/CVE-2017-12763/): Privilege escalation in nomachine:nomachine (high 8.8)
- [CVE-2017-12762](https://insights.sbomify.com/CVE-2017-12762/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-12761](https://insights.sbomify.com/CVE-2017-12761/): SQL injection in webfile explorer project:webfile explorer (high 7.5)
- [CVE-2017-12760](https://insights.sbomify.com/CVE-2017-12760/): SQL injection in ynetinteractive:mobiketa (high 8.8)
- [CVE-2017-1276](https://insights.sbomify.com/CVE-2017-1276/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-12759](https://insights.sbomify.com/CVE-2017-12759/): SQL injection in ynetinteractive:soa school management (critical 9.8)
- [CVE-2017-12758](https://insights.sbomify.com/CVE-2017-12758/): SQL injection in joomlaextensions:component appointment (critical 9.8)
- [CVE-2017-12757](https://insights.sbomify.com/CVE-2017-12757/): SQL injection in ambittechnologies:itech b2b script (critical 9.8)
- [CVE-2017-12756](https://insights.sbomify.com/CVE-2017-12756/): Command injection in extplorer:extplorer (high 7.2)
- [CVE-2017-12754](https://insights.sbomify.com/CVE-2017-12754/): Memory corruption in asuswrt-merlin:asuswrt-merlin (high 8.8)
- [CVE-2017-1275](https://insights.sbomify.com/CVE-2017-1275/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-12741](https://insights.sbomify.com/CVE-2017-12741/): Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (high 8.7)
- [CVE-2017-12740](https://insights.sbomify.com/CVE-2017-12740/): Security feature bypass in Siemens LOGO! Soft Comfort (All versions before V8.2) (medium 5.9)
- [CVE-2017-1274](https://insights.sbomify.com/CVE-2017-1274/): Memory corruption in Domino (high 8.8)
- [CVE-2017-12739](https://insights.sbomify.com/CVE-2017-12739/): Missing authorization in Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 (critical 9.8)
- [CVE-2017-12738](https://insights.sbomify.com/CVE-2017-12738/): Cross-site scripting in Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 (medium 6.1)
- [CVE-2017-12737](https://insights.sbomify.com/CVE-2017-12737/): Information disclosure in Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi00 (medium 5.3)
- [CVE-2017-12736](https://insights.sbomify.com/CVE-2017-12736/): Auth bypass in RUGGEDCOM M2100 (high 8.8)
- [CVE-2017-12735](https://insights.sbomify.com/CVE-2017-12735/): Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants) (high 7.4)
- [CVE-2017-12734](https://insights.sbomify.com/CVE-2017-12734/): Information disclosure in LOGO! 8 BM (incl. SIPLUS variants) (high 7.5)
- [CVE-2017-12733](https://insights.sbomify.com/CVE-2017-12733/): Auth bypass in OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite (critical 9.8)
- [CVE-2017-12732](https://insights.sbomify.com/CVE-2017-12732/): Memory corruption in GE CIMPLICITY (medium 6.8)
- [CVE-2017-12731](https://insights.sbomify.com/CVE-2017-12731/): SQL injection in OPW Fuel Management Systems SiteSentinel Integra and SiteSentinel iSite (critical 9.8)
- [CVE-2017-12730](https://insights.sbomify.com/CVE-2017-12730/): Privilege escalation in mySCADA myPRO (high 7.8)
- [CVE-2017-12729](https://insights.sbomify.com/CVE-2017-12729/): SQL injection in Moxa SoftCMS Live Viewer (critical 9.8)
- [CVE-2017-12728](https://insights.sbomify.com/CVE-2017-12728/): Privilege escalation in SpiderControl SCADA Web Server (high 7.8)
- [CVE-2017-12726](https://insights.sbomify.com/CVE-2017-12726/): Hardcoded credentials in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (high 7.3)
- [CVE-2017-12725](https://insights.sbomify.com/CVE-2017-12725/): Hardcoded credentials in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (medium 5.6)
- [CVE-2017-12724](https://insights.sbomify.com/CVE-2017-12724/): Hardcoded credentials in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (high 8.1)
- [CVE-2017-12723](https://insights.sbomify.com/CVE-2017-12723/): Information disclosure in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (low 3.7)
- [CVE-2017-12722](https://insights.sbomify.com/CVE-2017-12722/): Memory corruption in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (medium 5.3)
- [CVE-2017-12721](https://insights.sbomify.com/CVE-2017-12721/): Security feature bypass in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (medium 5.9)
- [CVE-2017-12720](https://insights.sbomify.com/CVE-2017-12720/): Missing authorization in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (high 8.1)
- [CVE-2017-1272](https://insights.sbomify.com/CVE-2017-1272/): Information disclosure in Security Guardium (low 3.7)
- [CVE-2017-12719](https://insights.sbomify.com/CVE-2017-12719/): Null dereference in Advantech WebAccess (high 7.5)
- [CVE-2017-12718](https://insights.sbomify.com/CVE-2017-12718/): Memory corruption in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (high 8.1)
- [CVE-2017-12717](https://insights.sbomify.com/CVE-2017-12717/): Other in Advantech WebAccess (high 7.8)
- [CVE-2017-12716](https://insights.sbomify.com/CVE-2017-12716/): Information disclosure in Accent and Anthem (medium 6.5)
- [CVE-2017-12714](https://insights.sbomify.com/CVE-2017-12714/): Denial of service in Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI. (medium 6.5)
- [CVE-2017-12713](https://insights.sbomify.com/CVE-2017-12713/): Misconfiguration in Advantech WebAccess (high 7.8)
- [CVE-2017-12712](https://insights.sbomify.com/CVE-2017-12712/): Auth bypass in Accent/Anthem, Accent MRI, Assurity/Allure, and Assurity MRI. (high 8.8)
- [CVE-2017-12711](https://insights.sbomify.com/CVE-2017-12711/): Privilege escalation in Advantech WebAccess (high 7.8)
- [CVE-2017-12710](https://insights.sbomify.com/CVE-2017-12710/): SQL injection in Advantech WebAccess (high 7.5)
- [CVE-2017-1271](https://insights.sbomify.com/CVE-2017-1271/): Weak cryptography in Security Guardium (high 7.5)
- [CVE-2017-12709](https://insights.sbomify.com/CVE-2017-12709/): Hardcoded credentials in Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455 (medium 5.3)
- [CVE-2017-12708](https://insights.sbomify.com/CVE-2017-12708/): Memory corruption in Advantech WebAccess (critical 9.8)
- [CVE-2017-12707](https://insights.sbomify.com/CVE-2017-12707/): Memory corruption in SpiderControl SCADA MicroBrowser (critical 9.8)
- [CVE-2017-12706](https://insights.sbomify.com/CVE-2017-12706/): Memory corruption in Advantech WebAccess (critical 9.8)
- [CVE-2017-12705](https://insights.sbomify.com/CVE-2017-12705/): Memory corruption in Advantech WebOP (high 7.8)
- [CVE-2017-12704](https://insights.sbomify.com/CVE-2017-12704/): Memory corruption in Advantech WebAccess (high 8.8)
- [CVE-2017-12703](https://insights.sbomify.com/CVE-2017-12703/): Cross-site request forgery in Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455 (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/113/