# Vulnerabilities published in 2017 - [CVE-2017-5590](https://insights.sbomify.com/CVE-2017-5590/): Security feature bypass in chatsecure:chatsecure (medium 5.9) - [CVE-2017-5589](https://insights.sbomify.com/CVE-2017-5589/): Security feature bypass in yaxim:bruno (medium 5.9) - [CVE-2017-5586](https://insights.sbomify.com/CVE-2017-5586/): Deserialization in opentext:documentum d2 (critical 9.8) - [CVE-2017-5585](https://insights.sbomify.com/CVE-2017-5585/): SQL injection in opentext:documentum content server (high 8.8) - [CVE-2017-5584](https://insights.sbomify.com/CVE-2017-5584/): Cross-site scripting in paloaltonetworks:pan-os (medium 5.4) - [CVE-2017-5583](https://insights.sbomify.com/CVE-2017-5583/): Information disclosure in paloaltonetworks:pan-os (medium 6.5) - [CVE-2017-5581](https://insights.sbomify.com/CVE-2017-5581/): Memory corruption in tigervnc:tigervnc (critical 9.8) - [CVE-2017-5580](https://insights.sbomify.com/CVE-2017-5580/): Memory corruption in virglrenderer project:virglrenderer (high 7.1) - [CVE-2017-5579](https://insights.sbomify.com/CVE-2017-5579/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2017-5578](https://insights.sbomify.com/CVE-2017-5578/): Denial of service in qemu:qemu (medium 6.5) - [CVE-2017-5577](https://insights.sbomify.com/CVE-2017-5577/): Denial of service in linux:linux kernel (medium 5.5) - [CVE-2017-5576](https://insights.sbomify.com/CVE-2017-5576/): Integer overflow in linux:linux kernel (high 7.8) - [CVE-2017-5575](https://insights.sbomify.com/CVE-2017-5575/): SQL injection in metalgenix:genixcms (critical 9.8) - [CVE-2017-5574](https://insights.sbomify.com/CVE-2017-5574/): SQL injection in metalgenix:genixcms (critical 9.8) - [CVE-2017-5573](https://insights.sbomify.com/CVE-2017-5573/): Missing authorization in citrix:xenserver (medium 4.9) - [CVE-2017-5572](https://insights.sbomify.com/CVE-2017-5572/): Privilege escalation in citrix:xenserver (medium 6.5) - [CVE-2017-5571](https://insights.sbomify.com/CVE-2017-5571/): Open redirect in flexerasoftware:flexnet publisher (medium 6.1) - [CVE-2017-5570](https://insights.sbomify.com/CVE-2017-5570/): SQL injection in eclinicalworks:patient portal (high 8.8) - [CVE-2017-5569](https://insights.sbomify.com/CVE-2017-5569/): SQL injection in eclinicalworks:patient portal (critical 9.8) - [CVE-2017-5567](https://insights.sbomify.com/CVE-2017-5567/): Code injection in avast:free antivirus (medium 6.7) - [CVE-2017-5566](https://insights.sbomify.com/CVE-2017-5566/): Code injection in avg:anti-virus (medium 6.7) - [CVE-2017-5565](https://insights.sbomify.com/CVE-2017-5565/): Security feature bypass in trendmicro:antivirus\+ (medium 6.7) - [CVE-2017-5563](https://insights.sbomify.com/CVE-2017-5563/): Memory corruption in libtiff:libtiff (high 8.8) - [CVE-2017-5556](https://insights.sbomify.com/CVE-2017-5556/): Memory corruption in foxitsoftware:foxit reader (high 8.1) - [CVE-2017-5554](https://insights.sbomify.com/CVE-2017-5554/): Auth bypass in oneplus:oxygenos (high 8.1) - [CVE-2017-5553](https://insights.sbomify.com/CVE-2017-5553/): Cross-site scripting in b2evolution:b2evolution (medium 5.4) - [CVE-2017-5552](https://insights.sbomify.com/CVE-2017-5552/): Denial of service in qemu:qemu (medium 6.5) - [CVE-2017-5551](https://insights.sbomify.com/CVE-2017-5551/): Privilege escalation in linux:linux kernel (medium 4.4) - [CVE-2017-5550](https://insights.sbomify.com/CVE-2017-5550/): Information disclosure in linux:linux kernel (medium 5.5) - [CVE-2017-5549](https://insights.sbomify.com/CVE-2017-5549/): Information disclosure in linux:linux kernel (medium 5.5) - [CVE-2017-5548](https://insights.sbomify.com/CVE-2017-5548/): Memory corruption in linux:linux kernel (high 7.8) - [CVE-2017-5547](https://insights.sbomify.com/CVE-2017-5547/): Memory corruption in linux:linux kernel (high 7.8) - [CVE-2017-5546](https://insights.sbomify.com/CVE-2017-5546/): Denial of service in linux:linux kernel (high 7.8) - [CVE-2017-5545](https://insights.sbomify.com/CVE-2017-5545/): Memory corruption in libimobiledevice:libplist (critical 9.1) - [CVE-2017-5544](https://insights.sbomify.com/CVE-2017-5544/): Denial of service in fiberhome:fengine s5800 firmware (medium 5.9) - [CVE-2017-5543](https://insights.sbomify.com/CVE-2017-5543/): Subrion CMS PHP Object Injection (critical 9.8) - [CVE-2017-5542](https://insights.sbomify.com/CVE-2017-5542/): Cross-site scripting in getsymphony:symphony (medium 6.1) - [CVE-2017-5541](https://insights.sbomify.com/CVE-2017-5541/): Path traversal in getsymphony:symphony (medium 5.3) - [CVE-2017-5539](https://insights.sbomify.com/CVE-2017-5539/): Path traversal in b2evolution:b2evolution (critical 9.1) - [CVE-2017-5538](https://insights.sbomify.com/CVE-2017-5538/): Memory corruption in samsung:samsung mobile (critical 9.8) - [CVE-2017-5537](https://insights.sbomify.com/CVE-2017-5537/): Weblate user account enumeration via reset password form (medium 5.3) - [CVE-2017-5536](https://insights.sbomify.com/CVE-2017-5536/): TIBCO DataSynapse GridServer manager component vulnerable to cross-site scripting attacks (medium 6.3) - [CVE-2017-5535](https://insights.sbomify.com/CVE-2017-5535/): TIBCO DataSynapse GridServer improper use of encryption (medium 6.8) - [CVE-2017-5534](https://insights.sbomify.com/CVE-2017-5534/): Improper sandboxing of a third-party component in tibbr (high 8.8) - [CVE-2017-5533](https://insights.sbomify.com/CVE-2017-5533/): TIBCO JasperReports Server credentials disclosure (critical 9.3) - [CVE-2017-5532](https://insights.sbomify.com/CVE-2017-5532/): TIBCO JasperReports persistent cross site scripting (medium 5.4) - [CVE-2017-5531](https://insights.sbomify.com/CVE-2017-5531/): Privilege escalation in TIBCO Managed File Transfer Command Center (high 8.0) - [CVE-2017-5530](https://insights.sbomify.com/CVE-2017-5530/): SAML protocol handling errors in tibbr (high 8.1) - [CVE-2017-5529](https://insights.sbomify.com/CVE-2017-5529/): TIBCO JasperReports Library Information Disclosure (medium 4.1) - [CVE-2017-5528](https://insights.sbomify.com/CVE-2017-5528/): TIBCO JasperReports Server cross-site vulnerabilities (medium 5.7) - [CVE-2017-5527](https://insights.sbomify.com/CVE-2017-5527/): TIBCO Spotfire injection vulnerabilities (medium 4.3) - [CVE-2017-5526](https://insights.sbomify.com/CVE-2017-5526/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2017-5525](https://insights.sbomify.com/CVE-2017-5525/): Denial of service in debian:debian linux (medium 6.5) - [CVE-2017-5524](https://insights.sbomify.com/CVE-2017-5524/): Plone Sandbox Escape (medium 4.3) - [CVE-2017-5522](https://insights.sbomify.com/CVE-2017-5522/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-5521](https://insights.sbomify.com/CVE-2017-5521/): NETGEAR Multiple Devices Exposure of Sensitive Information (high 8.1, exploited in the wild) - [CVE-2017-5520](https://insights.sbomify.com/CVE-2017-5520/): File upload in metalgenix:genixcms (high 8.8) - [CVE-2017-5519](https://insights.sbomify.com/CVE-2017-5519/): SQL injection in metalgenix:genixcms (critical 9.8) - [CVE-2017-5518](https://insights.sbomify.com/CVE-2017-5518/): Server-side request forgery in metalgenix:genixcms (high 7.4) - [CVE-2017-5517](https://insights.sbomify.com/CVE-2017-5517/): SQL injection in metalgenix:genixcms (critical 9.8) - [CVE-2017-5516](https://insights.sbomify.com/CVE-2017-5516/): Cross-site scripting in metalgenix:genixcms (medium 6.1) - [CVE-2017-5515](https://insights.sbomify.com/CVE-2017-5515/): Cross-site scripting in metalgenix:genixcms (medium 5.4) - [CVE-2017-5511](https://insights.sbomify.com/CVE-2017-5511/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-5510](https://insights.sbomify.com/CVE-2017-5510/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-5509](https://insights.sbomify.com/CVE-2017-5509/): Memory corruption in imagemagick:imagemagick (high 7.8) - [CVE-2017-5508](https://insights.sbomify.com/CVE-2017-5508/): Memory corruption in imagemagick:imagemagick (medium 5.5) - [CVE-2017-5507](https://insights.sbomify.com/CVE-2017-5507/): Denial of service in debian:debian linux (high 7.5) - [CVE-2017-5506](https://insights.sbomify.com/CVE-2017-5506/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-5505](https://insights.sbomify.com/CVE-2017-5505/): Memory corruption in jasper project:jasper (medium 5.5) - [CVE-2017-5504](https://insights.sbomify.com/CVE-2017-5504/): Memory corruption in jasper project:jasper (medium 5.5) - [CVE-2017-5503](https://insights.sbomify.com/CVE-2017-5503/): Memory corruption in jasper project:jasper (medium 5.5) - [CVE-2017-5502](https://insights.sbomify.com/CVE-2017-5502/): Denial of service in jasper project:jasper (medium 5.5) - [CVE-2017-5501](https://insights.sbomify.com/CVE-2017-5501/): Integer overflow in jasper project:jasper (medium 5.5) - [CVE-2017-5500](https://insights.sbomify.com/CVE-2017-5500/): Denial of service in jasper project:jasper (medium 5.5) - [CVE-2017-5499](https://insights.sbomify.com/CVE-2017-5499/): Integer overflow in jasper project:jasper (medium 5.5) - [CVE-2017-5498](https://insights.sbomify.com/CVE-2017-5498/): Denial of service in jasper project:jasper (medium 5.5) - [CVE-2017-5496](https://insights.sbomify.com/CVE-2017-5496/): Auth bypass in sawmill:sawmill (critical 9.8) - [CVE-2017-5495](https://insights.sbomify.com/CVE-2017-5495/): Denial of service in quagga:quagga (high 7.5) - [CVE-2017-5494](https://insights.sbomify.com/CVE-2017-5494/): Cross-site scripting in b2evolution:b2evolution (medium 5.4) - [CVE-2017-5493](https://insights.sbomify.com/CVE-2017-5493/): Weak cryptography in wordpress:wordpress (high 7.5) - [CVE-2017-5492](https://insights.sbomify.com/CVE-2017-5492/): Cross-site request forgery in wordpress:wordpress (high 8.8) - [CVE-2017-5491](https://insights.sbomify.com/CVE-2017-5491/): Security feature bypass in wordpress:wordpress (medium 5.3) - [CVE-2017-5490](https://insights.sbomify.com/CVE-2017-5490/): Cross-site scripting in wordpress:wordpress (medium 6.1) - [CVE-2017-5489](https://insights.sbomify.com/CVE-2017-5489/): Cross-site request forgery in wordpress:wordpress (high 8.8) - [CVE-2017-5488](https://insights.sbomify.com/CVE-2017-5488/): Cross-site scripting in wordpress:wordpress (medium 6.1) - [CVE-2017-5487](https://insights.sbomify.com/CVE-2017-5487/): Information disclosure in wordpress:wordpress (medium 5.3) - [CVE-2017-5486](https://insights.sbomify.com/CVE-2017-5486/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-5485](https://insights.sbomify.com/CVE-2017-5485/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-5484](https://insights.sbomify.com/CVE-2017-5484/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-5483](https://insights.sbomify.com/CVE-2017-5483/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-5482](https://insights.sbomify.com/CVE-2017-5482/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-5481](https://insights.sbomify.com/CVE-2017-5481/): Information disclosure in trendmicro:officescan (high 8.8) - [CVE-2017-5480](https://insights.sbomify.com/CVE-2017-5480/): Path traversal in b2evolution:b2evolution (high 8.1) - [CVE-2017-5476](https://insights.sbomify.com/CVE-2017-5476/): Cross-site request forgery in s9y:serendipity (high 8.8) - [CVE-2017-5475](https://insights.sbomify.com/CVE-2017-5475/): Cross-site request forgery in s9y:serendipity (high 8.8) - [CVE-2017-5474](https://insights.sbomify.com/CVE-2017-5474/): Open redirect in s9y:serendipity (medium 6.1) - [CVE-2017-5473](https://insights.sbomify.com/CVE-2017-5473/): Cross-site request forgery in ntop:ntopng (high 8.8) - [CVE-2017-5472](https://insights.sbomify.com/CVE-2017-5472/): Use after free in Firefox (critical 9.8) - [CVE-2017-5471](https://insights.sbomify.com/CVE-2017-5471/): Memory corruption in Firefox (critical 9.8) - [CVE-2017-5470](https://insights.sbomify.com/CVE-2017-5470/): Memory corruption in Firefox (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/39/