# Vulnerabilities published in 2017


- [CVE-2017-7440](https://insights.sbomify.com/CVE-2017-7440/): Other in n/a (medium 6.5)
- [CVE-2017-7439](https://insights.sbomify.com/CVE-2017-7439/): Information disclosure in n/a (high 7.5)
- [CVE-2017-7438](https://insights.sbomify.com/CVE-2017-7438/): DOM cross site scripting attack against NetIQ Privileged Account Manager (medium 4.6)
- [CVE-2017-7437](https://insights.sbomify.com/CVE-2017-7437/): Cross site scripting attacks against NetIQ Privileged Account Manager (medium 4.6)
- [CVE-2017-7436](https://insights.sbomify.com/CVE-2017-7436/): libzypp accepts unsigned packages even when configured to check signatures (high 8.1)
- [CVE-2017-7435](https://insights.sbomify.com/CVE-2017-7435/): libzypp accepts unsigned 3rd party repo without warning (high 8.1)
- [CVE-2017-7434](https://insights.sbomify.com/CVE-2017-7434/): NetIQ Identity Manager JDBC driver could leak passwords in exception traces (low 3.3)
- [CVE-2017-7433](https://insights.sbomify.com/CVE-2017-7433/): Path traversal in Vibe (medium 6.5)
- [CVE-2017-7432](https://insights.sbomify.com/CVE-2017-7432/): File upload in Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 (critical 9.8)
- [CVE-2017-7431](https://insights.sbomify.com/CVE-2017-7431/): Cross-site request forgery in Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 (high 8.8)
- [CVE-2017-7430](https://insights.sbomify.com/CVE-2017-7430/): Cross-site scripting in Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 (medium 6.1)
- [CVE-2017-7429](https://insights.sbomify.com/CVE-2017-7429/): Fix for NetIQ shell code upload (high 8.8)
- [CVE-2017-7428](https://insights.sbomify.com/CVE-2017-7428/): NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat. (medium 5.3)
- [CVE-2017-7427](https://insights.sbomify.com/CVE-2017-7427/): iManager - Multiple Reflected Cross-Site Scripting attacks (medium 5.4)
- [CVE-2017-7426](https://insights.sbomify.com/CVE-2017-7426/): iManager - XML External Entity vulnerabilities (medium 5.4)
- [CVE-2017-7425](https://insights.sbomify.com/CVE-2017-7425/): Multiple Reflected XSS in iManager (high 7.6)
- [CVE-2017-7424](https://insights.sbomify.com/CVE-2017-7424/): Path traversal in Micro Focus Enterprise Developer, Micro Focus Enterprise Server (medium 6.5)
- [CVE-2017-7423](https://insights.sbomify.com/CVE-2017-7423/): Cross-site request forgery in Micro Focus Enterprise Developer, Micro Focus Enterprise Server (high 8.8)
- [CVE-2017-7422](https://insights.sbomify.com/CVE-2017-7422/): Cross-site scripting in Micro Focus Enterprise Developer, Micro Focus Enterprise Server (medium 5.4)
- [CVE-2017-7421](https://insights.sbomify.com/CVE-2017-7421/): Cross-site scripting in Micro Focus Enterprise Developer, Micro Focus Enterprise Server (medium 6.1)
- [CVE-2017-7420](https://insights.sbomify.com/CVE-2017-7420/): Auth bypass in Micro Focus Enterprise Developer, Micro Focus Enterprise Server (critical 9.8)
- [CVE-2017-7419](https://insights.sbomify.com/CVE-2017-7419/): NetIQ Access Manager OAuth Consent screen XSS attack (medium 4.6)
- [CVE-2017-7418](https://insights.sbomify.com/CVE-2017-7418/): Path traversal in n/a (medium 5.5)
- [CVE-2017-7416](https://insights.sbomify.com/CVE-2017-7416/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7415](https://insights.sbomify.com/CVE-2017-7415/): Auth bypass in n/a (high 7.5)
- [CVE-2017-7414](https://insights.sbomify.com/CVE-2017-7414/): Command injection in n/a (high 7.5)
- [CVE-2017-7413](https://insights.sbomify.com/CVE-2017-7413/): Command injection in n/a (high 8.8)
- [CVE-2017-7412](https://insights.sbomify.com/CVE-2017-7412/): Misconfiguration in n/a (high 7.8)
- [CVE-2017-7411](https://insights.sbomify.com/CVE-2017-7411/): Deserialization in n/a (high 8.8)
- [CVE-2017-7410](https://insights.sbomify.com/CVE-2017-7410/): SQL injection in n/a (critical 9.8)
- [CVE-2017-7409](https://insights.sbomify.com/CVE-2017-7409/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7408](https://insights.sbomify.com/CVE-2017-7408/): Denial of service in n/a (high 7.5)
- [CVE-2017-7407](https://insights.sbomify.com/CVE-2017-7407/): Information disclosure in n/a (low 2.4)
- [CVE-2017-7406](https://insights.sbomify.com/CVE-2017-7406/): Weak cryptography in n/a (critical 9.8)
- [CVE-2017-7405](https://insights.sbomify.com/CVE-2017-7405/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-7404](https://insights.sbomify.com/CVE-2017-7404/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-7402](https://insights.sbomify.com/CVE-2017-7402/): File upload in n/a (critical 9.8)
- [CVE-2017-7401](https://insights.sbomify.com/CVE-2017-7401/): Denial of service in n/a (high 7.5)
- [CVE-2017-7400](https://insights.sbomify.com/CVE-2017-7400/): OpenStack Horizon Cross-site Scripting (XSS) (medium 4.8)
- [CVE-2017-7399](https://insights.sbomify.com/CVE-2017-7399/): Privilege escalation in n/a (high 8.8)
- [CVE-2017-7398](https://insights.sbomify.com/CVE-2017-7398/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-7397](https://insights.sbomify.com/CVE-2017-7397/): Denial of service in n/a (high 7.5)
- [CVE-2017-7396](https://insights.sbomify.com/CVE-2017-7396/): Denial of service in n/a (high 7.5)
- [CVE-2017-7395](https://insights.sbomify.com/CVE-2017-7395/): Integer overflow in n/a (medium 6.5)
- [CVE-2017-7394](https://insights.sbomify.com/CVE-2017-7394/): Denial of service in n/a (high 7.5)
- [CVE-2017-7393](https://insights.sbomify.com/CVE-2017-7393/): Use after free in n/a (high 8.8)
- [CVE-2017-7392](https://insights.sbomify.com/CVE-2017-7392/): Denial of service in n/a (high 7.5)
- [CVE-2017-7391](https://insights.sbomify.com/CVE-2017-7391/): Magmi XSS Vulnerability (medium 6.1)
- [CVE-2017-7390](https://insights.sbomify.com/CVE-2017-7390/): SocialNetwork Cross-Site Scripting (XSS) vulnerability (medium 6.1)
- [CVE-2017-7389](https://insights.sbomify.com/CVE-2017-7389/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7388](https://insights.sbomify.com/CVE-2017-7388/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7387](https://insights.sbomify.com/CVE-2017-7387/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7386](https://insights.sbomify.com/CVE-2017-7386/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7384](https://insights.sbomify.com/CVE-2017-7384/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7383](https://insights.sbomify.com/CVE-2017-7383/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7382](https://insights.sbomify.com/CVE-2017-7382/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7381](https://insights.sbomify.com/CVE-2017-7381/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7380](https://insights.sbomify.com/CVE-2017-7380/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7379](https://insights.sbomify.com/CVE-2017-7379/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7378](https://insights.sbomify.com/CVE-2017-7378/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7377](https://insights.sbomify.com/CVE-2017-7377/): Denial of service in n/a (medium 6.0)
- [CVE-2017-7376](https://insights.sbomify.com/CVE-2017-7376/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-7375](https://insights.sbomify.com/CVE-2017-7375/): XML external entity in n/a (critical 9.8)
- [CVE-2017-7374](https://insights.sbomify.com/CVE-2017-7374/): Use after free in n/a (high 7.8)
- [CVE-2017-7373](https://insights.sbomify.com/CVE-2017-7373/): Use after free in All Qualcomm products (high 7.8)
- [CVE-2017-7372](https://insights.sbomify.com/CVE-2017-7372/): Race condition in All Qualcomm products (high 7.0)
- [CVE-2017-7371](https://insights.sbomify.com/CVE-2017-7371/): Use after free in All Qualcomm products (high 7.8)
- [CVE-2017-7370](https://insights.sbomify.com/CVE-2017-7370/): Use after free in All Qualcomm products (high 7.0)
- [CVE-2017-7369](https://insights.sbomify.com/CVE-2017-7369/): Memory corruption in All Qualcomm products (high 7.8)
- [CVE-2017-7368](https://insights.sbomify.com/CVE-2017-7368/): Race condition in All Qualcomm products (high 7.0)
- [CVE-2017-7367](https://insights.sbomify.com/CVE-2017-7367/): Integer overflow in All Qualcomm products (high 7.8)
- [CVE-2017-7366](https://insights.sbomify.com/CVE-2017-7366/): Missing authorization in n/a (medium 5.5)
- [CVE-2017-7365](https://insights.sbomify.com/CVE-2017-7365/): Memory corruption in All Qualcomm products (high 7.8)
- [CVE-2017-7364](https://insights.sbomify.com/CVE-2017-7364/): Use after free in All Qualcomm products (critical 9.8)
- [CVE-2017-7363](https://insights.sbomify.com/CVE-2017-7363/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7362](https://insights.sbomify.com/CVE-2017-7362/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7361](https://insights.sbomify.com/CVE-2017-7361/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7360](https://insights.sbomify.com/CVE-2017-7360/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7359](https://insights.sbomify.com/CVE-2017-7359/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7358](https://insights.sbomify.com/CVE-2017-7358/): Path traversal in n/a (high 7.3)
- [CVE-2017-7357](https://insights.sbomify.com/CVE-2017-7357/): File upload in n/a (critical 9.1)
- [CVE-2017-7352](https://insights.sbomify.com/CVE-2017-7352/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-7351](https://insights.sbomify.com/CVE-2017-7351/): SQL injection in n/a (high 8.8)
- [CVE-2017-7346](https://insights.sbomify.com/CVE-2017-7346/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7345](https://insights.sbomify.com/CVE-2017-7345/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-7344](https://insights.sbomify.com/CVE-2017-7344/): Privilege escalation in FortiClientWindows (high 8.1)
- [CVE-2017-7343](https://insights.sbomify.com/CVE-2017-7343/): Open redirect in Fortinet FortiPortal (medium 6.1)
- [CVE-2017-7342](https://insights.sbomify.com/CVE-2017-7342/): Security feature bypass in Fortinet FortiPortal (critical 9.8)
- [CVE-2017-7341](https://insights.sbomify.com/CVE-2017-7341/): Command injection in n/a (high 7.2)
- [CVE-2017-7340](https://insights.sbomify.com/CVE-2017-7340/): Cross-site scripting in Fortinet FortiPortal (medium 6.1)
- [CVE-2017-7339](https://insights.sbomify.com/CVE-2017-7339/): Cross-site scripting in Fortinet FortiPortal (medium 6.1)
- [CVE-2017-7338](https://insights.sbomify.com/CVE-2017-7338/): Information disclosure in Fortinet FortiPortal (high 7.5)
- [CVE-2017-7337](https://insights.sbomify.com/CVE-2017-7337/): Missing authorization in Fortinet FortiPortal (critical 9.1)
- [CVE-2017-7336](https://insights.sbomify.com/CVE-2017-7336/): Hardcoded credentials in Fortinet FortiWLM (critical 9.8)
- [CVE-2017-7335](https://insights.sbomify.com/CVE-2017-7335/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-7327](https://insights.sbomify.com/CVE-2017-7327/): Other in Yandex Browser for Desktop (high 7.8)
- [CVE-2017-7326](https://insights.sbomify.com/CVE-2017-7326/): Race condition in Yandex Browser for Android (high 7.5)
- [CVE-2017-7325](https://insights.sbomify.com/CVE-2017-7325/): Other in Yandex Browser (high 7.5)
- [CVE-2017-7324](https://insights.sbomify.com/CVE-2017-7324/): Code injection in n/a (critical 9.8)
- [CVE-2017-7323](https://insights.sbomify.com/CVE-2017-7323/): Server-side request forgery in n/a (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/24/