# Vulnerabilities published in 2017


- [CVE-2017-11733](https://insights.sbomify.com/CVE-2017-11733/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2017-11732](https://insights.sbomify.com/CVE-2017-11732/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2017-11731](https://insights.sbomify.com/CVE-2017-11731/): Memory corruption in libming:ming (medium 5.5)
- [CVE-2017-11730](https://insights.sbomify.com/CVE-2017-11730/): Memory corruption in libming:ming (medium 5.5)
- [CVE-2017-11729](https://insights.sbomify.com/CVE-2017-11729/): Memory corruption in libming:ming (medium 5.5)
- [CVE-2017-11728](https://insights.sbomify.com/CVE-2017-11728/): Memory corruption in libming:ming (medium 5.5)
- [CVE-2017-11727](https://insights.sbomify.com/CVE-2017-11727/): Cross-site scripting in connectwise:manage (medium 6.1)
- [CVE-2017-11726](https://insights.sbomify.com/CVE-2017-11726/): Cross-site request forgery in connectwise:manage (high 8.8)
- [CVE-2017-11725](https://insights.sbomify.com/CVE-2017-11725/): Open redirect in thycotic:secret server (medium 5.4)
- [CVE-2017-11724](https://insights.sbomify.com/CVE-2017-11724/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11723](https://insights.sbomify.com/CVE-2017-11723/): Path traversal in xinha:xinha (high 7.5)
- [CVE-2017-11722](https://insights.sbomify.com/CVE-2017-11722/): Memory corruption in graphicsmagick:graphicsmagick (medium 6.5)
- [CVE-2017-11721](https://insights.sbomify.com/CVE-2017-11721/): Memory corruption in ioquake3:ioquake3 (critical 9.8)
- [CVE-2017-11720](https://insights.sbomify.com/CVE-2017-11720/): Denial of service in lame project:lame (critical 9.8)
- [CVE-2017-11719](https://insights.sbomify.com/CVE-2017-11719/): Memory corruption in ffmpeg:ffmpeg (high 7.8)
- [CVE-2017-11718](https://insights.sbomify.com/CVE-2017-11718/): Open redirect in metinfo project:metinfo (medium 6.1)
- [CVE-2017-11717](https://insights.sbomify.com/CVE-2017-11717/): Security feature bypass in metinfo project:metinfo (high 7.5)
- [CVE-2017-11716](https://insights.sbomify.com/CVE-2017-11716/): Cross-site scripting in metinfo project:metinfo (medium 6.1)
- [CVE-2017-11715](https://insights.sbomify.com/CVE-2017-11715/): File upload in metinfo project:metinfo (critical 9.8)
- [CVE-2017-11714](https://insights.sbomify.com/CVE-2017-11714/): Memory corruption in artifex:ghostscript (high 7.8)
- [CVE-2017-1171](https://insights.sbomify.com/CVE-2017-1171/): Missing authorization in TRIRIGA Application Platform (medium 4.3)
- [CVE-2017-11706](https://insights.sbomify.com/CVE-2017-11706/): Information disclosure in boozt:boozt (high 7.5)
- [CVE-2017-11705](https://insights.sbomify.com/CVE-2017-11705/): Denial of service in libming:ming (medium 6.5)
- [CVE-2017-11704](https://insights.sbomify.com/CVE-2017-11704/): Memory corruption in libming:ming (medium 6.5)
- [CVE-2017-11703](https://insights.sbomify.com/CVE-2017-11703/): Denial of service in libming:ming (medium 6.5)
- [CVE-2017-1170](https://insights.sbomify.com/CVE-2017-1170/): Auth bypass in WebSphere Commerce Enterprise (medium 5.3)
- [CVE-2017-11698](https://insights.sbomify.com/CVE-2017-11698/): Memory corruption in mozilla:network security services (high 7.8)
- [CVE-2017-11697](https://insights.sbomify.com/CVE-2017-11697/): Denial of service in mozilla:network security services (high 7.8)
- [CVE-2017-11696](https://insights.sbomify.com/CVE-2017-11696/): Memory corruption in mozilla:network security services (high 7.8)
- [CVE-2017-11695](https://insights.sbomify.com/CVE-2017-11695/): Memory corruption in mozilla:network security services (high 7.8)
- [CVE-2017-11694](https://insights.sbomify.com/CVE-2017-11694/): Hardcoded credentials in medhost:medhost document management system (critical 9.1)
- [CVE-2017-11693](https://insights.sbomify.com/CVE-2017-11693/): Hardcoded credentials in medhost:medhost document management system (critical 9.1)
- [CVE-2017-11692](https://insights.sbomify.com/CVE-2017-11692/): Denial of service in yaml-cpp project:yaml-cpp (high 7.5)
- [CVE-2017-11691](https://insights.sbomify.com/CVE-2017-11691/): Cross-site scripting in cacti:cacti (medium 5.4)
- [CVE-2017-1169](https://insights.sbomify.com/CVE-2017-1169/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-11687](https://insights.sbomify.com/CVE-2017-11687/): Cross-site scripting in zohocorp:manageengine eventlog analyzer (medium 6.1)
- [CVE-2017-11686](https://insights.sbomify.com/CVE-2017-11686/): Weak cryptography in zohocorp:manageengine eventlog analyzer (medium 6.1)
- [CVE-2017-11685](https://insights.sbomify.com/CVE-2017-11685/): Cross-site scripting in zohocorp:manageengine eventlog analyzer (medium 6.1)
- [CVE-2017-11684](https://insights.sbomify.com/CVE-2017-11684/): Memory corruption in libav:libav (high 7.5)
- [CVE-2017-11683](https://insights.sbomify.com/CVE-2017-11683/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-11682](https://insights.sbomify.com/CVE-2017-11682/): Cross-site scripting in hashtopolis:hashtopolis (medium 6.1)
- [CVE-2017-11681](https://insights.sbomify.com/CVE-2017-11681/): Privilege escalation in project hashtopussy:hashtopussy (high 8.8)
- [CVE-2017-11680](https://insights.sbomify.com/CVE-2017-11680/): Cross-site request forgery in project hashtopussy:hashtopussy (high 8.8)
- [CVE-2017-1168](https://insights.sbomify.com/CVE-2017-1168/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2017-11679](https://insights.sbomify.com/CVE-2017-11679/): Cross-site request forgery in hashtopus project:hashtopus (high 8.8)
- [CVE-2017-11678](https://insights.sbomify.com/CVE-2017-11678/): SQL injection in hashtopus project:hashtopus (high 8.8)
- [CVE-2017-11677](https://insights.sbomify.com/CVE-2017-11677/): Cross-site scripting in hashtopus project:hashtopus (medium 6.1)
- [CVE-2017-11675](https://insights.sbomify.com/CVE-2017-11675/): Authenticated RCE in Zen Cart 1.5.5e (high 8.8)
- [CVE-2017-11674](https://insights.sbomify.com/CVE-2017-11674/): Memory corruption in acunetix:web vulnerability scanner (medium 5.5)
- [CVE-2017-11673](https://insights.sbomify.com/CVE-2017-11673/): Memory corruption in acunetix:web vulnerability scanner (critical 9.8)
- [CVE-2017-11672](https://insights.sbomify.com/CVE-2017-11672/): Privilege escalation in opcfoundation:local discovery server (high 7.8)
- [CVE-2017-11671](https://insights.sbomify.com/CVE-2017-11671/): Weak cryptography in gnu:gcc (medium 4.0)
- [CVE-2017-11670](https://insights.sbomify.com/CVE-2017-11670/): Memory corruption in eapmd5pass project:eapmd5pass (high 7.5)
- [CVE-2017-11669](https://insights.sbomify.com/CVE-2017-11669/): Memory corruption in eapmd5pass project:eapmd5pass (high 7.5)
- [CVE-2017-11668](https://insights.sbomify.com/CVE-2017-11668/): Memory corruption in eapmd5pass project:eapmd5pass (high 7.5)
- [CVE-2017-11667](https://insights.sbomify.com/CVE-2017-11667/): Auth bypass in openproject:openproject (high 8.1)
- [CVE-2017-11666](https://insights.sbomify.com/CVE-2017-11666/): Cross-site scripting in kopano:webapp (medium 6.1)
- [CVE-2017-11665](https://insights.sbomify.com/CVE-2017-11665/): Denial of service in ffmpeg:ffmpeg (high 7.5)
- [CVE-2017-11664](https://insights.sbomify.com/CVE-2017-11664/): Memory corruption in mindwerks:wildmidi (medium 6.5)
- [CVE-2017-11663](https://insights.sbomify.com/CVE-2017-11663/): Memory corruption in mindwerks:wildmidi (medium 6.5)
- [CVE-2017-11662](https://insights.sbomify.com/CVE-2017-11662/): Memory corruption in mindwerks:wildmidi (high 7.5)
- [CVE-2017-11661](https://insights.sbomify.com/CVE-2017-11661/): Memory corruption in mindwerks:wildmidi (high 7.5)
- [CVE-2017-11658](https://insights.sbomify.com/CVE-2017-11658/): Path traversal in wp-rocket:wp-rocket (high 7.5)
- [CVE-2017-11657](https://insights.sbomify.com/CVE-2017-11657/): Privilege escalation in dashlane:dashlane (high 7.3)
- [CVE-2017-11655](https://insights.sbomify.com/CVE-2017-11655/): Denial of service in sipcrack project:sipcrack (high 7.5)
- [CVE-2017-11654](https://insights.sbomify.com/CVE-2017-11654/): Memory corruption in sipcrack project:sipcrack (medium 5.9)
- [CVE-2017-11653](https://insights.sbomify.com/CVE-2017-11653/): Misconfiguration in razer:synapse (high 7.8)
- [CVE-2017-11652](https://insights.sbomify.com/CVE-2017-11652/): Misconfiguration in razer:synapse (high 8.4)
- [CVE-2017-11651](https://insights.sbomify.com/CVE-2017-11651/): Cross-site scripting in nexusphp:nexusphp (medium 6.1)
- [CVE-2017-11650](https://insights.sbomify.com/CVE-2017-11650/): Cross-site scripting in draytek:vigorap 910c firmware (medium 6.1)
- [CVE-2017-11649](https://insights.sbomify.com/CVE-2017-11649/): Cross-site request forgery in draytek:vigorap 910c firmware (high 8.8)
- [CVE-2017-11648](https://insights.sbomify.com/CVE-2017-11648/): Cross-site request forgery in techroutes:tr 1803-3g firmware (high 8.8)
- [CVE-2017-11647](https://insights.sbomify.com/CVE-2017-11647/): Cross-site scripting in netcomm:4gt101w bootloader (medium 5.4)
- [CVE-2017-11646](https://insights.sbomify.com/CVE-2017-11646/): Cross-site request forgery in netcomm:4gt101w bootloader (high 8.8)
- [CVE-2017-11645](https://insights.sbomify.com/CVE-2017-11645/): Missing authorization in netcomm:4gt101w bootloader (critical 9.8)
- [CVE-2017-11644](https://insights.sbomify.com/CVE-2017-11644/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11643](https://insights.sbomify.com/CVE-2017-11643/): Memory corruption in graphicsmagick:graphicsmagick (critical 9.8)
- [CVE-2017-11642](https://insights.sbomify.com/CVE-2017-11642/): Null dereference in graphicsmagick:graphicsmagick (high 8.8)
- [CVE-2017-11641](https://insights.sbomify.com/CVE-2017-11641/): Denial of service in graphicsmagick:graphicsmagick (critical 9.8)
- [CVE-2017-11640](https://insights.sbomify.com/CVE-2017-11640/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1164](https://insights.sbomify.com/CVE-2017-1164/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2017-11639](https://insights.sbomify.com/CVE-2017-11639/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11638](https://insights.sbomify.com/CVE-2017-11638/): Memory corruption in graphicsmagick:graphicsmagick (high 8.8)
- [CVE-2017-11637](https://insights.sbomify.com/CVE-2017-11637/): Null dereference in graphicsmagick:graphicsmagick (critical 9.8)
- [CVE-2017-11636](https://insights.sbomify.com/CVE-2017-11636/): Memory corruption in graphicsmagick:graphicsmagick (critical 9.8)
- [CVE-2017-11635](https://insights.sbomify.com/CVE-2017-11635/): Information disclosure in -:wireless ip camera 360 (high 7.5)
- [CVE-2017-11634](https://insights.sbomify.com/CVE-2017-11634/): Hardcoded credentials in -:wireless ip camera 360 (critical 9.8)
- [CVE-2017-11633](https://insights.sbomify.com/CVE-2017-11633/): Information disclosure in -:wireless ip camera 360 (high 7.5)
- [CVE-2017-11632](https://insights.sbomify.com/CVE-2017-11632/): Hardcoded credentials in -:wireless ip camera 360 (critical 9.8)
- [CVE-2017-11631](https://insights.sbomify.com/CVE-2017-11631/): SQL injection in fiyo:fiyo cms (critical 9.8)
- [CVE-2017-11630](https://insights.sbomify.com/CVE-2017-11630/): Path traversal in fiyo:fiyo cms (high 7.5)
- [CVE-2017-11629](https://insights.sbomify.com/CVE-2017-11629/): Cross-site scripting in finecms:finecms (medium 6.1)
- [CVE-2017-11628](https://insights.sbomify.com/CVE-2017-11628/): Memory corruption in php:php (high 7.8)
- [CVE-2017-11627](https://insights.sbomify.com/CVE-2017-11627/): Denial of service in qpdf project:qpdf (medium 5.5)
- [CVE-2017-11626](https://insights.sbomify.com/CVE-2017-11626/): Denial of service in qpdf project:qpdf (medium 5.5)
- [CVE-2017-11625](https://insights.sbomify.com/CVE-2017-11625/): Denial of service in qpdf project:qpdf (medium 5.5)
- [CVE-2017-11624](https://insights.sbomify.com/CVE-2017-11624/): Denial of service in qpdf project:qpdf (medium 5.5)
- [CVE-2017-1162](https://insights.sbomify.com/CVE-2017-1162/): Information disclosure in Security QRadar SIEM (high 7.5)
- [CVE-2017-11617](https://insights.sbomify.com/CVE-2017-11617/): Cross-site scripting in atmail:atmail (medium 6.1)
- [CVE-2017-11615](https://insights.sbomify.com/CVE-2017-11615/): Code injection in factorio:factorio (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/122/