# Vulnerabilities published in 2017


- [CVE-2017-7989](https://insights.sbomify.com/CVE-2017-7989/): File upload in n/a (medium 6.5)
- [CVE-2017-7988](https://insights.sbomify.com/CVE-2017-7988/): Business logic in n/a (medium 5.3)
- [CVE-2017-7987](https://insights.sbomify.com/CVE-2017-7987/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7986](https://insights.sbomify.com/CVE-2017-7986/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7985](https://insights.sbomify.com/CVE-2017-7985/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7984](https://insights.sbomify.com/CVE-2017-7984/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7983](https://insights.sbomify.com/CVE-2017-7983/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-7982](https://insights.sbomify.com/CVE-2017-7982/): Integer overflow in n/a (medium 5.5)
- [CVE-2017-7981](https://insights.sbomify.com/CVE-2017-7981/): Command injection in n/a (high 8.8)
- [CVE-2017-7980](https://insights.sbomify.com/CVE-2017-7980/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7979](https://insights.sbomify.com/CVE-2017-7979/): Denial of service in n/a (high 7.8)
- [CVE-2017-7978](https://insights.sbomify.com/CVE-2017-7978/): Information disclosure in n/a (high 7.5)
- [CVE-2017-7977](https://insights.sbomify.com/CVE-2017-7977/): Command injection in n/a (critical 9.8)
- [CVE-2017-7976](https://insights.sbomify.com/CVE-2017-7976/): Integer overflow in n/a (high 7.1)
- [CVE-2017-7975](https://insights.sbomify.com/CVE-2017-7975/): Integer overflow in n/a (high 7.8)
- [CVE-2017-7974](https://insights.sbomify.com/CVE-2017-7974/): Path traversal in U.Motion (critical 9.8)
- [CVE-2017-7973](https://insights.sbomify.com/CVE-2017-7973/): SQL injection in U.Motion (critical 9.8)
- [CVE-2017-7972](https://insights.sbomify.com/CVE-2017-7972/): Command injection in Citect Anywhere (medium 5.5)
- [CVE-2017-7971](https://insights.sbomify.com/CVE-2017-7971/): Weak cryptography in Citect Anywhere (medium 6.5)
- [CVE-2017-7970](https://insights.sbomify.com/CVE-2017-7970/): Server-side request forgery in Citect Anywhere (medium 6.5)
- [CVE-2017-7969](https://insights.sbomify.com/CVE-2017-7969/): Cross-site request forgery in Citect Anywhere (high 8.8)
- [CVE-2017-7968](https://insights.sbomify.com/CVE-2017-7968/): Privilege escalation in Schneider Electric Wonderware InduSoft Web Studio (high 7.8)
- [CVE-2017-7967](https://insights.sbomify.com/CVE-2017-7967/): Memory corruption in VAMPSET (medium 5.5)
- [CVE-2017-7966](https://insights.sbomify.com/CVE-2017-7966/): Other in SoMachine HVAC Programming Software (high 8.8)
- [CVE-2017-7965](https://insights.sbomify.com/CVE-2017-7965/): Memory corruption in SoMachine HVAC Programming Software (high 7.3)
- [CVE-2017-7964](https://insights.sbomify.com/CVE-2017-7964/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2017-7963](https://insights.sbomify.com/CVE-2017-7963/): Denial of service in n/a (high 7.5)
- [CVE-2017-7962](https://insights.sbomify.com/CVE-2017-7962/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7961](https://insights.sbomify.com/CVE-2017-7961/): Integer overflow in n/a (high 7.8)
- [CVE-2017-7960](https://insights.sbomify.com/CVE-2017-7960/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7957](https://insights.sbomify.com/CVE-2017-7957/): Denial of service in XStream (high 7.5)
- [CVE-2017-7953](https://insights.sbomify.com/CVE-2017-7953/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-7952](https://insights.sbomify.com/CVE-2017-7952/): SQL injection in n/a (high 8.8)
- [CVE-2017-7951](https://insights.sbomify.com/CVE-2017-7951/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-7950](https://insights.sbomify.com/CVE-2017-7950/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7948](https://insights.sbomify.com/CVE-2017-7948/): Integer overflow in n/a (high 7.8)
- [CVE-2017-7947](https://insights.sbomify.com/CVE-2017-7947/): Information disclosure in n/a (medium 6.5)
- [CVE-2017-7946](https://insights.sbomify.com/CVE-2017-7946/): Use after free in n/a (medium 5.5)
- [CVE-2017-7945](https://insights.sbomify.com/CVE-2017-7945/): Information disclosure in n/a (critical 9.8)
- [CVE-2017-7944](https://insights.sbomify.com/CVE-2017-7944/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7943](https://insights.sbomify.com/CVE-2017-7943/): Denial of service in n/a (medium 6.5)
- [CVE-2017-7942](https://insights.sbomify.com/CVE-2017-7942/): Denial of service in n/a (medium 6.5)
- [CVE-2017-7941](https://insights.sbomify.com/CVE-2017-7941/): Denial of service in n/a (medium 6.5)
- [CVE-2017-7940](https://insights.sbomify.com/CVE-2017-7940/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7939](https://insights.sbomify.com/CVE-2017-7939/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7938](https://insights.sbomify.com/CVE-2017-7938/): Memory corruption in n/a (medium 6.6)
- [CVE-2017-7937](https://insights.sbomify.com/CVE-2017-7937/): Auth bypass in Phoenix Contact GmbH mGuard (medium 4.0)
- [CVE-2017-7936](https://insights.sbomify.com/CVE-2017-7936/): Memory corruption in NXP i.MX Product Family (medium 6.3)
- [CVE-2017-7935](https://insights.sbomify.com/CVE-2017-7935/): Denial of service in Phoenix Contact GmbH mGuard (high 7.5)
- [CVE-2017-7934](https://insights.sbomify.com/CVE-2017-7934/): Auth bypass in OSIsoft PI Server 2017 (medium 5.9)
- [CVE-2017-7933](https://insights.sbomify.com/CVE-2017-7933/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2017-7932](https://insights.sbomify.com/CVE-2017-7932/): Security feature bypass in NXP i.MX Product Family (medium 6.0)
- [CVE-2017-7931](https://insights.sbomify.com/CVE-2017-7931/): Auth bypass in ABB IP GATEWAY (critical 9.8)
- [CVE-2017-7930](https://insights.sbomify.com/CVE-2017-7930/): Auth bypass in OSIsoft PI Server 2017 (high 7.4)
- [CVE-2017-7929](https://insights.sbomify.com/CVE-2017-7929/): Path traversal in Advantech WebAccess (high 7.1)
- [CVE-2017-7928](https://insights.sbomify.com/CVE-2017-7928/): Missing authorization in Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622 (critical 10.0)
- [CVE-2017-7927](https://insights.sbomify.com/CVE-2017-7927/): Auth bypass in Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras (high 7.3)
- [CVE-2017-7926](https://insights.sbomify.com/CVE-2017-7926/): Cross-site request forgery in OSIsoft PI Web API 2017 (high 8.8)
- [CVE-2017-7925](https://insights.sbomify.com/CVE-2017-7925/): Hardcoded credentials in Dahua Technology Co., Ltd Digital Video Recorders and IP Cameras (critical 9.8)
- [CVE-2017-7924](https://insights.sbomify.com/CVE-2017-7924/): Denial of service in Rockwell Automation MicroLogix 1100 Controllers (high 7.5)
- [CVE-2017-7923](https://insights.sbomify.com/CVE-2017-7923/): Hardcoded credentials in Hikvision Cameras (high 8.8)
- [CVE-2017-7922](https://insights.sbomify.com/CVE-2017-7922/): Privilege escalation in Cambium Networks ePMP (high 7.6)
- [CVE-2017-7921](https://insights.sbomify.com/CVE-2017-7921/): Hikvision Multiple Products Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2017-7920](https://insights.sbomify.com/CVE-2017-7920/): Missing authorization in ABB VSN300 WiFi Logger Card (high 7.5)
- [CVE-2017-7919](https://insights.sbomify.com/CVE-2017-7919/): Auth bypass in Newport XPS-Cx, XPS-Qx (critical 9.8)
- [CVE-2017-7918](https://insights.sbomify.com/CVE-2017-7918/): Missing authorization in Cambium Networks ePMP (medium 6.8)
- [CVE-2017-7917](https://insights.sbomify.com/CVE-2017-7917/): Cross-site request forgery in Moxa OnCell (high 8.8)
- [CVE-2017-7916](https://insights.sbomify.com/CVE-2017-7916/): Missing authorization in ABB VSN300 WiFi Logger Card (medium 6.5)
- [CVE-2017-7915](https://insights.sbomify.com/CVE-2017-7915/): Auth bypass in Moxa OnCell (critical 9.8)
- [CVE-2017-7914](https://insights.sbomify.com/CVE-2017-7914/): Missing authorization in Rockwell Automation PanelView Plus 6 700-1500 (high 8.6)
- [CVE-2017-7913](https://insights.sbomify.com/CVE-2017-7913/): Information disclosure in Moxa OnCell (critical 9.8)
- [CVE-2017-7912](https://insights.sbomify.com/CVE-2017-7912/): Auth bypass in SRN-4000 (critical 9.8)
- [CVE-2017-7911](https://insights.sbomify.com/CVE-2017-7911/): Code injection in CyberVision Kaa IoT Platform (high 8.8)
- [CVE-2017-7910](https://insights.sbomify.com/CVE-2017-7910/): Memory corruption in Digital Canal Structural Wind Analysis (high 7.5)
- [CVE-2017-7909](https://insights.sbomify.com/CVE-2017-7909/): Auth bypass in Advantech B+B SmartWorx MESR901 (critical 9.8)
- [CVE-2017-7908](https://insights.sbomify.com/CVE-2017-7908/): Memory corruption in GE Communicator (high 7.6)
- [CVE-2017-7907](https://insights.sbomify.com/CVE-2017-7907/): XML external entity in Schneider Electric Wonderware Historian Client (medium 6.6)
- [CVE-2017-7906](https://insights.sbomify.com/CVE-2017-7906/): Cross-site request forgery in ABB IP GATEWAY (high 8.8)
- [CVE-2017-7905](https://insights.sbomify.com/CVE-2017-7905/): Weak cryptography in GE Multilin SR, UR, and URplus Protective Relays (critical 9.8)
- [CVE-2017-7903](https://insights.sbomify.com/CVE-2017-7903/): Weak cryptography in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 (critical 9.8)
- [CVE-2017-7902](https://insights.sbomify.com/CVE-2017-7902/): Weak cryptography in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 (critical 9.8)
- [CVE-2017-7901](https://insights.sbomify.com/CVE-2017-7901/): Weak cryptography in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 (high 8.6)
- [CVE-2017-7899](https://insights.sbomify.com/CVE-2017-7899/): Information disclosure in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 (critical 9.8)
- [CVE-2017-7898](https://insights.sbomify.com/CVE-2017-7898/): Auth bypass in Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 (critical 9.8)
- [CVE-2017-7897](https://insights.sbomify.com/CVE-2017-7897/): MantisBT XSS via my_view_page.php and view_user_page.php (medium 6.1)
- [CVE-2017-7896](https://insights.sbomify.com/CVE-2017-7896/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7895](https://insights.sbomify.com/CVE-2017-7895/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-7894](https://insights.sbomify.com/CVE-2017-7894/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7893](https://insights.sbomify.com/CVE-2017-7893/): SaltStack Salt allows compromised salt-minions to impersonate the salt-master (critical 9.8)
- [CVE-2017-7892](https://insights.sbomify.com/CVE-2017-7892/): Integer overflow in n/a (high 7.5)
- [CVE-2017-7891](https://insights.sbomify.com/CVE-2017-7891/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7890](https://insights.sbomify.com/CVE-2017-7890/): Information disclosure in n/a (medium 6.5)
- [CVE-2017-7889](https://insights.sbomify.com/CVE-2017-7889/): Security feature bypass in n/a (high 7.8)
- [CVE-2017-7888](https://insights.sbomify.com/CVE-2017-7888/): Dolibarr ERP and CRM Insecure Encryption (critical 9.8)
- [CVE-2017-7887](https://insights.sbomify.com/CVE-2017-7887/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 6.1)
- [CVE-2017-7886](https://insights.sbomify.com/CVE-2017-7886/): Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter (critical 9.8)
- [CVE-2017-7885](https://insights.sbomify.com/CVE-2017-7885/): Integer overflow in n/a (high 7.1)
- [CVE-2017-7884](https://insights.sbomify.com/CVE-2017-7884/): Privilege escalation in n/a (high 8.4)
- [CVE-2017-7882](https://insights.sbomify.com/CVE-2017-7882/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-7881](https://insights.sbomify.com/CVE-2017-7881/): Cross-site request forgery in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/19/