# Vulnerabilities published in 2017


- [CVE-2017-12495](https://insights.sbomify.com/CVE-2017-12495/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12494](https://insights.sbomify.com/CVE-2017-12494/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12493](https://insights.sbomify.com/CVE-2017-12493/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12492](https://insights.sbomify.com/CVE-2017-12492/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12491](https://insights.sbomify.com/CVE-2017-12491/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12490](https://insights.sbomify.com/CVE-2017-12490/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-1249](https://insights.sbomify.com/CVE-2017-1249/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2017-12489](https://insights.sbomify.com/CVE-2017-12489/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12488](https://insights.sbomify.com/CVE-2017-12488/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12487](https://insights.sbomify.com/CVE-2017-12487/): Code injection in Intelligent Management Center (iMC) PLAT (high 8.8)
- [CVE-2017-12482](https://insights.sbomify.com/CVE-2017-12482/): Memory corruption in ledger-cli:ledger (high 7.8)
- [CVE-2017-12481](https://insights.sbomify.com/CVE-2017-12481/): Memory corruption in ledger-cli:ledger (high 7.8)
- [CVE-2017-12480](https://insights.sbomify.com/CVE-2017-12480/): Other in sandboxie:sandboxie installer (high 7.8)
- [CVE-2017-1248](https://insights.sbomify.com/CVE-2017-1248/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2017-12479](https://insights.sbomify.com/CVE-2017-12479/): Privilege escalation in kaseya:unitrends backup (high 8.8)
- [CVE-2017-12478](https://insights.sbomify.com/CVE-2017-12478/): Auth bypass in kaseya:unitrends backup (critical 9.8)
- [CVE-2017-12477](https://insights.sbomify.com/CVE-2017-12477/): Auth bypass in kaseya:unitrends backup (critical 9.8)
- [CVE-2017-12476](https://insights.sbomify.com/CVE-2017-12476/): Null dereference in bento4:bento4 (medium 5.5)
- [CVE-2017-12475](https://insights.sbomify.com/CVE-2017-12475/): Null dereference in axiosys:bento4 (medium 5.5)
- [CVE-2017-12474](https://insights.sbomify.com/CVE-2017-12474/): Null dereference in bento4:bento4 (medium 5.5)
- [CVE-2017-12473](https://insights.sbomify.com/CVE-2017-12473/): Denial of service in ccn-lite:ccn-lite (high 7.5)
- [CVE-2017-12472](https://insights.sbomify.com/CVE-2017-12472/): Null dereference in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-12471](https://insights.sbomify.com/CVE-2017-12471/): Memory corruption in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-12470](https://insights.sbomify.com/CVE-2017-12470/): Integer overflow in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-1247](https://insights.sbomify.com/CVE-2017-1247/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-12469](https://insights.sbomify.com/CVE-2017-12469/): Memory corruption in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-12468](https://insights.sbomify.com/CVE-2017-12468/): Memory corruption in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-12467](https://insights.sbomify.com/CVE-2017-12467/): Denial of service in ccn-lite:ccn-lite (high 7.5)
- [CVE-2017-12466](https://insights.sbomify.com/CVE-2017-12466/): Memory corruption in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-12465](https://insights.sbomify.com/CVE-2017-12465/): Integer overflow in ccn-lite:ccn-lite (critical 9.8)
- [CVE-2017-12464](https://insights.sbomify.com/CVE-2017-12464/): Null dereference in ccn-lite:ccn-lite (high 7.5)
- [CVE-2017-12463](https://insights.sbomify.com/CVE-2017-12463/): Denial of service in ccn-lite:ccn-lite (high 7.5)
- [CVE-2017-12460](https://insights.sbomify.com/CVE-2017-12460/): Cross-site scripting in barco:clickshare csc-1 firmware (medium 5.4)
- [CVE-2017-12459](https://insights.sbomify.com/CVE-2017-12459/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12458](https://insights.sbomify.com/CVE-2017-12458/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12457](https://insights.sbomify.com/CVE-2017-12457/): Null dereference in gnu:binutils (high 7.8)
- [CVE-2017-12456](https://insights.sbomify.com/CVE-2017-12456/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12455](https://insights.sbomify.com/CVE-2017-12455/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12454](https://insights.sbomify.com/CVE-2017-12454/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12453](https://insights.sbomify.com/CVE-2017-12453/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12452](https://insights.sbomify.com/CVE-2017-12452/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12451](https://insights.sbomify.com/CVE-2017-12451/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12450](https://insights.sbomify.com/CVE-2017-12450/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-1245](https://insights.sbomify.com/CVE-2017-1245/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2017-12449](https://insights.sbomify.com/CVE-2017-12449/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-12448](https://insights.sbomify.com/CVE-2017-12448/): Use after free in gnu:binutils (high 7.8)
- [CVE-2017-12447](https://insights.sbomify.com/CVE-2017-12447/): Memory corruption in gnome:gdk-pixbuf (high 7.8)
- [CVE-2017-12445](https://insights.sbomify.com/CVE-2017-12445/): Memory corruption in minidjvu project:minidjvu (medium 6.5)
- [CVE-2017-12444](https://insights.sbomify.com/CVE-2017-12444/): Memory corruption in minidjvu project:minidjvu (medium 6.5)
- [CVE-2017-12443](https://insights.sbomify.com/CVE-2017-12443/): Memory corruption in minidjvu project:minidjvu (medium 6.5)
- [CVE-2017-12442](https://insights.sbomify.com/CVE-2017-12442/): Memory corruption in minidjvu project:minidjvu (medium 6.5)
- [CVE-2017-12441](https://insights.sbomify.com/CVE-2017-12441/): Memory corruption in minidjvu project:minidjvu (medium 6.5)
- [CVE-2017-12440](https://insights.sbomify.com/CVE-2017-12440/): Openstack Aodh can be used to launder Keystone trusts (high 7.5)
- [CVE-2017-12439](https://insights.sbomify.com/CVE-2017-12439/): Cross-site scripting in socusoft:flash slideshow maker (high 7.5)
- [CVE-2017-12435](https://insights.sbomify.com/CVE-2017-12435/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12434](https://insights.sbomify.com/CVE-2017-12434/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12433](https://insights.sbomify.com/CVE-2017-12433/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12432](https://insights.sbomify.com/CVE-2017-12432/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12431](https://insights.sbomify.com/CVE-2017-12431/): Use after free in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12430](https://insights.sbomify.com/CVE-2017-12430/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12429](https://insights.sbomify.com/CVE-2017-12429/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12428](https://insights.sbomify.com/CVE-2017-12428/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12427](https://insights.sbomify.com/CVE-2017-12427/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12426](https://insights.sbomify.com/CVE-2017-12426/): Code injection in gitlab:gitlab (high 8.8)
- [CVE-2017-12425](https://insights.sbomify.com/CVE-2017-12425/): Integer overflow in varnish-cache:varnish (high 7.5)
- [CVE-2017-12424](https://insights.sbomify.com/CVE-2017-12424/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-12423](https://insights.sbomify.com/CVE-2017-12423/): Missing authorization in netapp:clustered data ontap (high 7.7)
- [CVE-2017-12422](https://insights.sbomify.com/CVE-2017-12422/): Missing authorization in netapp:storagegrid webscale (medium 6.5)
- [CVE-2017-12421](https://insights.sbomify.com/CVE-2017-12421/): Other in netapp:clustered data ontap (high 8.8)
- [CVE-2017-12420](https://insights.sbomify.com/CVE-2017-12420/): Memory corruption in netapp:clustered data ontap (high 8.8)
- [CVE-2017-1242](https://insights.sbomify.com/CVE-2017-1242/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2017-12419](https://insights.sbomify.com/CVE-2017-12419/): Information disclosure in mantisbt:mantisbt (medium 4.9)
- [CVE-2017-12418](https://insights.sbomify.com/CVE-2017-12418/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-12416](https://insights.sbomify.com/CVE-2017-12416/): Cross-site scripting in paloaltonetworks:pan-os (medium 6.1)
- [CVE-2017-12415](https://insights.sbomify.com/CVE-2017-12415/): Cross-site request forgery in oxid-esales:eshop (high 7.5)
- [CVE-2017-12414](https://insights.sbomify.com/CVE-2017-12414/): Other in pcfreetime:format factory (critical 9.8)
- [CVE-2017-12413](https://insights.sbomify.com/CVE-2017-12413/): Cross-site scripting in axis:2100 network camera firmware (medium 6.1)
- [CVE-2017-12412](https://insights.sbomify.com/CVE-2017-12412/): Denial of service in ccn-lite:ccn-lite (high 7.8)
- [CVE-2017-12410](https://insights.sbomify.com/CVE-2017-12410/): Race condition in kaseya:virtual system administrator (high 7.4)
- [CVE-2017-1241](https://insights.sbomify.com/CVE-2017-1241/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-1240](https://insights.sbomify.com/CVE-2017-1240/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-1239](https://insights.sbomify.com/CVE-2017-1239/): Information disclosure in Rational Quality Manager (medium 4.3)
- [CVE-2017-12380](https://insights.sbomify.com/CVE-2017-12380/): Null dereference in ClamAV AntiVirus software versions 0.99.2 and prior (high 7.5)
- [CVE-2017-1238](https://insights.sbomify.com/CVE-2017-1238/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2017-12379](https://insights.sbomify.com/CVE-2017-12379/): Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior (critical 9.8)
- [CVE-2017-12378](https://insights.sbomify.com/CVE-2017-12378/): Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior (medium 5.5)
- [CVE-2017-12377](https://insights.sbomify.com/CVE-2017-12377/): Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior (critical 9.8)
- [CVE-2017-12376](https://insights.sbomify.com/CVE-2017-12376/): Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior (high 7.8)
- [CVE-2017-12375](https://insights.sbomify.com/CVE-2017-12375/): Memory corruption in ClamAV AntiVirus software versions 0.99.2 and prior (high 7.5)
- [CVE-2017-12374](https://insights.sbomify.com/CVE-2017-12374/): Use after free in ClamAV AntiVirus software versions 0.99.2 and prior (high 7.5)
- [CVE-2017-12373](https://insights.sbomify.com/CVE-2017-12373/): Weak cryptography in Cisco legacy ASA 5500 products TLS protocol implementation (medium 5.9)
- [CVE-2017-12372](https://insights.sbomify.com/CVE-2017-12372/): Memory corruption in Cisco WebEx Recording Format and Advanced Recording Format Players (critical 9.6)
- [CVE-2017-12371](https://insights.sbomify.com/CVE-2017-12371/): Memory corruption in Cisco WebEx Recording Format and Advanced Recording Format Players (critical 9.6)
- [CVE-2017-12370](https://insights.sbomify.com/CVE-2017-12370/): Memory corruption in Cisco WebEx Recording Format and Advanced Recording Format Players (critical 9.6)
- [CVE-2017-1237](https://insights.sbomify.com/CVE-2017-1237/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-12369](https://insights.sbomify.com/CVE-2017-12369/): Memory corruption in Cisco WebEx Recording Format and Advanced Recording Format Players (critical 9.6)
- [CVE-2017-12368](https://insights.sbomify.com/CVE-2017-12368/): Memory corruption in Cisco WebEx Recording Format and Advanced Recording Format Players (critical 9.6)
- [CVE-2017-12367](https://insights.sbomify.com/CVE-2017-12367/): Memory corruption in Cisco WebEx Recording Format and Advanced Recording Format Players (critical 9.6)
- [CVE-2017-12366](https://insights.sbomify.com/CVE-2017-12366/): Cross-site scripting in Cisco WebEx Meeting Center (medium 6.1)
- [CVE-2017-12365](https://insights.sbomify.com/CVE-2017-12365/): Information disclosure in Cisco WebEx Event Center (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/116/