# Vulnerabilities published in 2017 - [CVE-2017-11390](https://insights.sbomify.com/CVE-2017-11390/): XML external entity in trendmicro:control manager (high 7.5) - [CVE-2017-11389](https://insights.sbomify.com/CVE-2017-11389/): Path traversal in trendmicro:control manager (critical 9.8) - [CVE-2017-11388](https://insights.sbomify.com/CVE-2017-11388/): SQL injection in trendmicro:control manager (high 8.8) - [CVE-2017-11387](https://insights.sbomify.com/CVE-2017-11387/): Auth bypass in trendmicro:control manager (high 7.5) - [CVE-2017-11386](https://insights.sbomify.com/CVE-2017-11386/): SQL injection in trendmicro:control manager (critical 9.8) - [CVE-2017-11385](https://insights.sbomify.com/CVE-2017-11385/): SQL injection in trendmicro:control manager (critical 9.8) - [CVE-2017-11384](https://insights.sbomify.com/CVE-2017-11384/): SQL injection in trendmicro:control manager (critical 9.8) - [CVE-2017-11383](https://insights.sbomify.com/CVE-2017-11383/): SQL injection in trendmicro:control manager (critical 9.8) - [CVE-2017-11382](https://insights.sbomify.com/CVE-2017-11382/): Other in Trend Micro Deep Discovery Email Inspector (high 7.5) - [CVE-2017-11381](https://insights.sbomify.com/CVE-2017-11381/): Command injection in Trend Micro Deep Discovery Director (critical 9.8) - [CVE-2017-11380](https://insights.sbomify.com/CVE-2017-11380/): Hardcoded credentials in Trend Micro Deep Discovery Director (critical 9.8) - [CVE-2017-11379](https://insights.sbomify.com/CVE-2017-11379/): Security feature bypass in Trend Micro Deep Discovery Director (high 7.5) - [CVE-2017-1137](https://insights.sbomify.com/CVE-2017-1137/): Security feature bypass in WebSphere Application Server (high 8.1) - [CVE-2017-11368](https://insights.sbomify.com/CVE-2017-11368/): Denial of service in fedoraproject:fedora (medium 6.5) - [CVE-2017-11367](https://insights.sbomify.com/CVE-2017-11367/): Memory corruption in shoco project:shoco (high 7.5) - [CVE-2017-11366](https://insights.sbomify.com/CVE-2017-11366/): Codiad Vulnerable to Shell Command Injection (critical 9.8) - [CVE-2017-11365](https://insights.sbomify.com/CVE-2017-11365/): Symfony Incorrect Access Control (critical 9.8) - [CVE-2017-11364](https://insights.sbomify.com/CVE-2017-11364/): Security feature bypass in joomla:joomla\! (high 8.8) - [CVE-2017-11362](https://insights.sbomify.com/CVE-2017-11362/): Memory corruption in php:php (critical 9.8) - [CVE-2017-11361](https://insights.sbomify.com/CVE-2017-11361/): Privilege escalation in intenogroup:inteno router firmware (high 8.8) - [CVE-2017-11360](https://insights.sbomify.com/CVE-2017-11360/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-11359](https://insights.sbomify.com/CVE-2017-11359/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2017-11358](https://insights.sbomify.com/CVE-2017-11358/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2017-11357](https://insights.sbomify.com/CVE-2017-11357/): Telerik UI for ASP.NET AJAX Insecure Direct Object Reference (critical 9.8, exploited in the wild) - [CVE-2017-11356](https://insights.sbomify.com/CVE-2017-11356/): Missing authorization in pega:pega platform (medium 6.5) - [CVE-2017-11355](https://insights.sbomify.com/CVE-2017-11355/): Cross-site scripting in pega:pega platform (medium 6.1) - [CVE-2017-11354](https://insights.sbomify.com/CVE-2017-11354/): SQL injection in fiyo:fiyo cms (critical 9.8) - [CVE-2017-11353](https://insights.sbomify.com/CVE-2017-11353/): Race condition in yadm project:yadm (medium 5.9) - [CVE-2017-11352](https://insights.sbomify.com/CVE-2017-11352/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-11351](https://insights.sbomify.com/CVE-2017-11351/): Hardcoded credentials in axesstel:mu553s firmware (critical 9.8) - [CVE-2017-11350](https://insights.sbomify.com/CVE-2017-11350/): Cross-site request forgery in axesstel:mu553s firmware (high 8.8) - [CVE-2017-11349](https://insights.sbomify.com/CVE-2017-11349/): Missing authorization in thermofisher:dt8x firmware (critical 9.8) - [CVE-2017-11348](https://insights.sbomify.com/CVE-2017-11348/): Path traversal in octopus:octopus deploy (medium 5.7) - [CVE-2017-11347](https://insights.sbomify.com/CVE-2017-11347/): Code injection in metinfo:metinfo (high 8.8) - [CVE-2017-11346](https://insights.sbomify.com/CVE-2017-11346/): File upload in zohocorp:manageengine desktop central (critical 9.8) - [CVE-2017-11345](https://insights.sbomify.com/CVE-2017-11345/): Memory corruption in asuswrt-merlin project:rt-ac1200 firmware (high 7.8) - [CVE-2017-11344](https://insights.sbomify.com/CVE-2017-11344/): Memory corruption in asuswrt-merlin project:rt-ac1200 firmware (high 7.8) - [CVE-2017-11343](https://insights.sbomify.com/CVE-2017-11343/): Denial of service in call-cc:chicken (high 7.5) - [CVE-2017-11342](https://insights.sbomify.com/CVE-2017-11342/): Memory corruption in libsass:libsass (high 7.5) - [CVE-2017-11341](https://insights.sbomify.com/CVE-2017-11341/): Memory corruption in libsass:libsass (high 7.5) - [CVE-2017-11340](https://insights.sbomify.com/CVE-2017-11340/): Denial of service in exiv2:exiv2 (medium 6.5) - [CVE-2017-1134](https://insights.sbomify.com/CVE-2017-1134/): Privilege escalation in Tivoli System Automation for Multiplatforms (high 7.8) - [CVE-2017-11339](https://insights.sbomify.com/CVE-2017-11339/): Memory corruption in exiv2:exiv2 (medium 6.5) - [CVE-2017-11338](https://insights.sbomify.com/CVE-2017-11338/): Denial of service in exiv2:exiv2 (medium 6.5) - [CVE-2017-11337](https://insights.sbomify.com/CVE-2017-11337/): Memory corruption in exiv2:exiv2 (medium 6.5) - [CVE-2017-11336](https://insights.sbomify.com/CVE-2017-11336/): Memory corruption in exiv2:exiv2 (medium 6.5) - [CVE-2017-11335](https://insights.sbomify.com/CVE-2017-11335/): Memory corruption in libtiff:libtiff (high 8.8) - [CVE-2017-11334](https://insights.sbomify.com/CVE-2017-11334/): Memory corruption in debian:debian linux (medium 4.4) - [CVE-2017-11333](https://insights.sbomify.com/CVE-2017-11333/): Denial of service in xiph.org:libvorbis (medium 5.5) - [CVE-2017-11332](https://insights.sbomify.com/CVE-2017-11332/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2017-11331](https://insights.sbomify.com/CVE-2017-11331/): Denial of service in xiph:vorbis-tools (medium 5.5) - [CVE-2017-11330](https://insights.sbomify.com/CVE-2017-11330/): Memory corruption in divfix:divfix\+\+ (medium 5.5) - [CVE-2017-1133](https://insights.sbomify.com/CVE-2017-1133/): Cross-site scripting in QRadar SIEM (medium 5.4) - [CVE-2017-11329](https://insights.sbomify.com/CVE-2017-11329/): SQL injection in glpi-project:glpi (critical 9.8) - [CVE-2017-11328](https://insights.sbomify.com/CVE-2017-11328/): Memory corruption in virustotal:yara (medium 5.5) - [CVE-2017-11327](https://insights.sbomify.com/CVE-2017-11327/): Information disclosure in tilde cms project:tilde cms (medium 6.5) - [CVE-2017-11326](https://insights.sbomify.com/CVE-2017-11326/): File upload in tilde cms project:tilde cms (high 7.5) - [CVE-2017-11325](https://insights.sbomify.com/CVE-2017-11325/): Path traversal in tilde cms project:tilde cms (high 7.5) - [CVE-2017-11324](https://insights.sbomify.com/CVE-2017-11324/): SQL injection in tilde cms project:tilde cms (critical 9.8) - [CVE-2017-11323](https://insights.sbomify.com/CVE-2017-11323/): Memory corruption in estsoft:alzip (high 7.8) - [CVE-2017-11322](https://insights.sbomify.com/CVE-2017-11322/): Command injection in ucopia:ucopia wireless appliance (high 8.2) - [CVE-2017-11321](https://insights.sbomify.com/CVE-2017-11321/): Command injection in ucopia:wireless appliance (high 7.2) - [CVE-2017-11320](https://insights.sbomify.com/CVE-2017-11320/): Cross-site scripting in technicolor:tc7337 firmware (medium 6.1) - [CVE-2017-1132](https://insights.sbomify.com/CVE-2017-1132/): Cross-site scripting in Sterling B2B Integrator (medium 5.4) - [CVE-2017-11319](https://insights.sbomify.com/CVE-2017-11319/): Privilege escalation in resolver:perspective (high 8.8) - [CVE-2017-11318](https://insights.sbomify.com/CVE-2017-11318/): Command injection in cobiansoft:cobian backup (high 8.1) - [CVE-2017-11317](https://insights.sbomify.com/CVE-2017-11317/): Telerik UI for ASP.NET AJAX Unrestricted File Upload (critical 9.8, exploited in the wild) - [CVE-2017-11311](https://insights.sbomify.com/CVE-2017-11311/): Memory corruption in openmpt:libopenmpt (high 7.8) - [CVE-2017-11310](https://insights.sbomify.com/CVE-2017-11310/): Denial of service in imagemagick:imagemagick (high 8.8) - [CVE-2017-1131](https://insights.sbomify.com/CVE-2017-1131/): Information disclosure in Sterling B2B Integrator (medium 6.5) - [CVE-2017-11309](https://insights.sbomify.com/CVE-2017-11309/): Memory corruption in avaya:ip office (critical 9.6) - [CVE-2017-11308](https://insights.sbomify.com/CVE-2017-11308/): Memory corruption in Adobe Acrobat and Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions (critical 9.8) - [CVE-2017-11307](https://insights.sbomify.com/CVE-2017-11307/): Memory corruption in Adobe Acrobat and Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions (critical 9.8) - [CVE-2017-11306](https://insights.sbomify.com/CVE-2017-11306/): Memory corruption in Adobe Acrobat and Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions (critical 9.8) - [CVE-2017-11305](https://insights.sbomify.com/CVE-2017-11305/): Other in Adobe Flash Player 27.0.0.187 and earlier versions (medium 6.5) - [CVE-2017-11304](https://insights.sbomify.com/CVE-2017-11304/): Use after free in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions (critical 9.8) - [CVE-2017-11303](https://insights.sbomify.com/CVE-2017-11303/): Memory corruption in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions (critical 9.8) - [CVE-2017-11302](https://insights.sbomify.com/CVE-2017-11302/): Memory corruption in Adobe InDesign 12.1.0 and earlier versions (critical 9.8) - [CVE-2017-11301](https://insights.sbomify.com/CVE-2017-11301/): Memory corruption in Adobe Digital Editions 4.5.6 and earlier versions (medium 5.3) - [CVE-2017-11300](https://insights.sbomify.com/CVE-2017-11300/): Memory corruption in Adobe Digital Editions 4.5.6 and earlier versions (medium 5.3) - [CVE-2017-1130](https://insights.sbomify.com/CVE-2017-1130/): Denial of service in Notes (medium 6.5) - [CVE-2017-11299](https://insights.sbomify.com/CVE-2017-11299/): Memory corruption in Adobe Digital Editions 4.5.6 and earlier versions (medium 5.3) - [CVE-2017-11298](https://insights.sbomify.com/CVE-2017-11298/): Memory corruption in Adobe Digital Editions 4.5.6 and earlier versions (medium 5.3) - [CVE-2017-11297](https://insights.sbomify.com/CVE-2017-11297/): Memory corruption in Adobe Digital Editions 4.5.6 and earlier versions (medium 5.3) - [CVE-2017-11296](https://insights.sbomify.com/CVE-2017-11296/): Cross-site scripting in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0 (medium 6.1) - [CVE-2017-11295](https://insights.sbomify.com/CVE-2017-11295/): Memory corruption in Adobe DNG Converter 9.12.1 and earlier versions (critical 9.8) - [CVE-2017-11294](https://insights.sbomify.com/CVE-2017-11294/): Memory corruption in Adobe Shockwave 12.2.9.199 and earlier (critical 9.8) - [CVE-2017-11293](https://insights.sbomify.com/CVE-2017-11293/): Memory corruption in Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions (critical 9.8) - [CVE-2017-11292](https://insights.sbomify.com/CVE-2017-11292/): Adobe Flash Player Type Confusion (high 8.8, exploited in the wild) - [CVE-2017-11291](https://insights.sbomify.com/CVE-2017-11291/): Server-side request forgery in Adobe Connect 9.6.2 and earlier versions (critical 10.0) - [CVE-2017-11290](https://insights.sbomify.com/CVE-2017-11290/): Other in Adobe Connect 9.6.2 and earlier versions (medium 6.1) - [CVE-2017-1129](https://insights.sbomify.com/CVE-2017-1129/): Denial of service in Lotus Expeditor (medium 6.5) - [CVE-2017-11289](https://insights.sbomify.com/CVE-2017-11289/): Cross-site scripting in Adobe Connect 9.6.2 and earlier versions (medium 6.1) - [CVE-2017-11288](https://insights.sbomify.com/CVE-2017-11288/): Cross-site scripting in Adobe Connect 9.6.2 and earlier versions (medium 6.1) - [CVE-2017-11287](https://insights.sbomify.com/CVE-2017-11287/): Cross-site scripting in Adobe Connect 9.6.2 and earlier versions (medium 6.1) - [CVE-2017-11286](https://insights.sbomify.com/CVE-2017-11286/): XML external entity in Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (high 7.5) - [CVE-2017-11285](https://insights.sbomify.com/CVE-2017-11285/): Cross-site scripting in Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (medium 6.1) - [CVE-2017-11284](https://insights.sbomify.com/CVE-2017-11284/): Deserialization in Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (critical 9.8) - [CVE-2017-11283](https://insights.sbomify.com/CVE-2017-11283/): Deserialization in Adobe ColdFusion Update 4 and earlier versions for ColdFusion 2016 release. Update 12 and earlier versions for ColdFusion 11. (critical 9.8) - [CVE-2017-11282](https://insights.sbomify.com/CVE-2017-11282/): Memory corruption in Adobe Flash Player 26.0.0.151 and earlier versions (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/125/