# Vulnerabilities published in 2017


- [CVE-2017-11614](https://insights.sbomify.com/CVE-2017-11614/): Hardcoded credentials in medhost:connex (critical 9.8)
- [CVE-2017-11613](https://insights.sbomify.com/CVE-2017-11613/): Denial of service in libtiff:libtiff (medium 6.5)
- [CVE-2017-11612](https://insights.sbomify.com/CVE-2017-11612/): Cross-site scripting in joomla:joomla\! (medium 6.1)
- [CVE-2017-11611](https://insights.sbomify.com/CVE-2017-11611/): Cross-site scripting in wolfcms:wolf cms (medium 5.4)
- [CVE-2017-11610](https://insights.sbomify.com/CVE-2017-11610/): Incorrect Default Permissions in Supervisor (high 8.8)
- [CVE-2017-1161](https://insights.sbomify.com/CVE-2017-1161/): Command injection in API Connect (high 7.3)
- [CVE-2017-11608](https://insights.sbomify.com/CVE-2017-11608/): Memory corruption in libsass:libsass (medium 6.5)
- [CVE-2017-11605](https://insights.sbomify.com/CVE-2017-11605/): Memory corruption in libsass:libsass (medium 6.5)
- [CVE-2017-11600](https://insights.sbomify.com/CVE-2017-11600/): Memory corruption in linux:linux kernel (high 7.0)
- [CVE-2017-1160](https://insights.sbomify.com/CVE-2017-1160/): Cross-site scripting in Financial Transaction Manager (medium 5.4)
- [CVE-2017-11594](https://insights.sbomify.com/CVE-2017-11594/): Cross-site scripting in loomio:loomio (medium 5.4)
- [CVE-2017-11593](https://insights.sbomify.com/CVE-2017-11593/): Cross-site scripting in ooso:markdown preview plus (medium 6.1)
- [CVE-2017-11592](https://insights.sbomify.com/CVE-2017-11592/): Memory corruption in exiv2:exiv2 (high 7.5)
- [CVE-2017-11591](https://insights.sbomify.com/CVE-2017-11591/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2017-11590](https://insights.sbomify.com/CVE-2017-11590/): Null dereference in gnome:libgxps (high 7.5)
- [CVE-2017-1159](https://insights.sbomify.com/CVE-2017-1159/): Open redirect in Business Process Manager Advanced (medium 5.4)
- [CVE-2017-11589](https://insights.sbomify.com/CVE-2017-11589/): Missing authorization in cisco:residential gateway firmware (critical 9.8)
- [CVE-2017-11588](https://insights.sbomify.com/CVE-2017-11588/): Command injection in cisco:residential gateway firmware (critical 9.8)
- [CVE-2017-11587](https://insights.sbomify.com/CVE-2017-11587/): Path traversal in cisco:residential gateway firmware (high 7.5)
- [CVE-2017-11586](https://insights.sbomify.com/CVE-2017-11586/): Open redirect in finecms:finecms (medium 6.1)
- [CVE-2017-11585](https://insights.sbomify.com/CVE-2017-11585/): Code injection in finecms:finecms (critical 9.8)
- [CVE-2017-11584](https://insights.sbomify.com/CVE-2017-11584/): SQL injection in finecms:finecms (critical 9.8)
- [CVE-2017-11583](https://insights.sbomify.com/CVE-2017-11583/): SQL injection in finecms:finecms (critical 9.8)
- [CVE-2017-11582](https://insights.sbomify.com/CVE-2017-11582/): SQL injection in finecms:finecms (critical 9.8)
- [CVE-2017-11581](https://insights.sbomify.com/CVE-2017-11581/): Cross-site scripting in finecms:finecms (medium 6.1)
- [CVE-2017-11580](https://insights.sbomify.com/CVE-2017-11580/): Memory corruption in blipcare:wi-fi blood pressure monitor firmware (medium 6.5)
- [CVE-2017-11579](https://insights.sbomify.com/CVE-2017-11579/): Information disclosure in blipcare:wi-fi blood pressure monitor firmware (high 7.1)
- [CVE-2017-11578](https://insights.sbomify.com/CVE-2017-11578/): Information disclosure in blipcare:wi-fi blood pressure monitor firmware (medium 5.9)
- [CVE-2017-11577](https://insights.sbomify.com/CVE-2017-11577/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11576](https://insights.sbomify.com/CVE-2017-11576/): Memory corruption in fontforge:fontforge (medium 5.5)
- [CVE-2017-11575](https://insights.sbomify.com/CVE-2017-11575/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11574](https://insights.sbomify.com/CVE-2017-11574/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11573](https://insights.sbomify.com/CVE-2017-11573/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11572](https://insights.sbomify.com/CVE-2017-11572/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11571](https://insights.sbomify.com/CVE-2017-11571/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11570](https://insights.sbomify.com/CVE-2017-11570/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-1157](https://insights.sbomify.com/CVE-2017-1157/): Missing authorization in Jazz Reporting Service (medium 4.3)
- [CVE-2017-11569](https://insights.sbomify.com/CVE-2017-11569/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11568](https://insights.sbomify.com/CVE-2017-11568/): Memory corruption in fontforge:fontforge (high 7.8)
- [CVE-2017-11567](https://insights.sbomify.com/CVE-2017-11567/): Cross-site request forgery in cesanta:mongoose embedded web server library (high 8.8)
- [CVE-2017-11566](https://insights.sbomify.com/CVE-2017-11566/): Command injection in appsec-labs:appuse (high 7.8)
- [CVE-2017-11565](https://insights.sbomify.com/CVE-2017-11565/): Security feature bypass in debian:tor (high 7.5)
- [CVE-2017-11564](https://insights.sbomify.com/CVE-2017-11564/): Command injection in dlink:eyeon baby monitor firmware (high 8.8)
- [CVE-2017-11563](https://insights.sbomify.com/CVE-2017-11563/): Memory corruption in dlink:eyeon baby monitor firmware (critical 9.8)
- [CVE-2017-11562](https://insights.sbomify.com/CVE-2017-11562/): Auth bypass in mt4:senhasegura (high 8.8)
- [CVE-2017-11561](https://insights.sbomify.com/CVE-2017-11561/): File upload in zohocorp:manageengine opmanager (medium 6.5)
- [CVE-2017-11560](https://insights.sbomify.com/CVE-2017-11560/): Cross-site scripting in zohocorp:manageengine opmanager (medium 5.4)
- [CVE-2017-1156](https://insights.sbomify.com/CVE-2017-1156/): Open redirect in WebSphere Portal (high 8.8)
- [CVE-2017-11559](https://insights.sbomify.com/CVE-2017-11559/): SQL injection in zohocorp:manageengine opmanager (high 7.5)
- [CVE-2017-11557](https://insights.sbomify.com/CVE-2017-11557/): Information disclosure in zohocorp:manageengine applications manager (medium 5.3)
- [CVE-2017-11556](https://insights.sbomify.com/CVE-2017-11556/): Denial of service in libsass:libsass (high 7.5)
- [CVE-2017-11555](https://insights.sbomify.com/CVE-2017-11555/): Memory corruption in libsass:libsass (high 7.5)
- [CVE-2017-11554](https://insights.sbomify.com/CVE-2017-11554/): Denial of service in libsass:libsass (high 7.5)
- [CVE-2017-11553](https://insights.sbomify.com/CVE-2017-11553/): Memory corruption in exiv2:exiv2 (high 7.5)
- [CVE-2017-11552](https://insights.sbomify.com/CVE-2017-11552/): Memory corruption in underbit:mad libmad (medium 6.5)
- [CVE-2017-11551](https://insights.sbomify.com/CVE-2017-11551/): Denial of service in libid3tag project:libid3tag (medium 5.5)
- [CVE-2017-11550](https://insights.sbomify.com/CVE-2017-11550/): Null dereference in libid3tag project:libid3tag (medium 5.5)
- [CVE-2017-1155](https://insights.sbomify.com/CVE-2017-1155/): Missing authorization in Algo One (medium 4.3)
- [CVE-2017-11549](https://insights.sbomify.com/CVE-2017-11549/): Denial of service in timidity\+\+ project:timidity\+\+ (medium 5.5)
- [CVE-2017-11548](https://insights.sbomify.com/CVE-2017-11548/): Memory corruption in xiph:libao (medium 5.5)
- [CVE-2017-11547](https://insights.sbomify.com/CVE-2017-11547/): Memory corruption in timidity\+\+ project:timidity\+\+ (medium 5.5)
- [CVE-2017-11546](https://insights.sbomify.com/CVE-2017-11546/): Denial of service in timidity\+\+ project:timidity\+\+ (medium 5.5)
- [CVE-2017-11543](https://insights.sbomify.com/CVE-2017-11543/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-11542](https://insights.sbomify.com/CVE-2017-11542/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-11541](https://insights.sbomify.com/CVE-2017-11541/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-11540](https://insights.sbomify.com/CVE-2017-11540/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1154](https://insights.sbomify.com/CVE-2017-1154/): Information disclosure in Algo One (medium 6.5)
- [CVE-2017-11539](https://insights.sbomify.com/CVE-2017-11539/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11538](https://insights.sbomify.com/CVE-2017-11538/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11537](https://insights.sbomify.com/CVE-2017-11537/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11536](https://insights.sbomify.com/CVE-2017-11536/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11535](https://insights.sbomify.com/CVE-2017-11535/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11534](https://insights.sbomify.com/CVE-2017-11534/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11533](https://insights.sbomify.com/CVE-2017-11533/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11532](https://insights.sbomify.com/CVE-2017-11532/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11531](https://insights.sbomify.com/CVE-2017-11531/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11530](https://insights.sbomify.com/CVE-2017-11530/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1153](https://insights.sbomify.com/CVE-2017-1153/): Missing authorization in TRIRIGA Application Platform (high 8.8)
- [CVE-2017-11529](https://insights.sbomify.com/CVE-2017-11529/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11528](https://insights.sbomify.com/CVE-2017-11528/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11527](https://insights.sbomify.com/CVE-2017-11527/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11526](https://insights.sbomify.com/CVE-2017-11526/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11525](https://insights.sbomify.com/CVE-2017-11525/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11524](https://insights.sbomify.com/CVE-2017-11524/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11523](https://insights.sbomify.com/CVE-2017-11523/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11522](https://insights.sbomify.com/CVE-2017-11522/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11521](https://insights.sbomify.com/CVE-2017-11521/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-1152](https://insights.sbomify.com/CVE-2017-1152/): Information disclosure in Financial Transaction Manager (medium 4.3)
- [CVE-2017-11519](https://insights.sbomify.com/CVE-2017-11519/): Weak cryptography in tp-link:archer c9 \(2.0\) firmware (critical 9.8)
- [CVE-2017-11517](https://insights.sbomify.com/CVE-2017-11517/): Memory corruption in geutebrueck:gcore (critical 9.8)
- [CVE-2017-11516](https://insights.sbomify.com/CVE-2017-11516/): Yii Cross-site Scripting Framework vulnerability (medium 6.1)
- [CVE-2017-11512](https://insights.sbomify.com/CVE-2017-11512/): Path traversal in ManageEngine ServiceDesk (high 7.5)
- [CVE-2017-11511](https://insights.sbomify.com/CVE-2017-11511/): Path traversal in ManageEngine ServiceDesk (high 7.5)
- [CVE-2017-11510](https://insights.sbomify.com/CVE-2017-11510/): Information disclosure in Wanscam HW0021 (critical 9.8)
- [CVE-2017-1151](https://insights.sbomify.com/CVE-2017-1151/): Privilege escalation in WebSphere Application Server (high 8.1)
- [CVE-2017-11509](https://insights.sbomify.com/CVE-2017-11509/): SQL injection in Firebird SQL Server (high 8.8)
- [CVE-2017-11508](https://insights.sbomify.com/CVE-2017-11508/): SQL injection in SecurityCenter (high 8.8)
- [CVE-2017-11507](https://insights.sbomify.com/CVE-2017-11507/): Cross-site scripting in Check MK (medium 6.1)
- [CVE-2017-11506](https://insights.sbomify.com/CVE-2017-11506/): Security feature bypass in Nessus (high 7.4)
- [CVE-2017-11505](https://insights.sbomify.com/CVE-2017-11505/): Denial of service in imagemagick:imagemagick (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/123/