# Vulnerabilities published in 2017


- [CVE-2017-5357](https://insights.sbomify.com/CVE-2017-5357/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2017-5356](https://insights.sbomify.com/CVE-2017-5356/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2017-5351](https://insights.sbomify.com/CVE-2017-5351/): Denial of service in samsung:samsung mobile (high 7.5)
- [CVE-2017-5350](https://insights.sbomify.com/CVE-2017-5350/): Denial of service in samsung:samsung mobile (high 7.5)
- [CVE-2017-5347](https://insights.sbomify.com/CVE-2017-5347/): SQL injection in metalgenix:genixcms (high 7.2)
- [CVE-2017-5346](https://insights.sbomify.com/CVE-2017-5346/): GeniXCMS SQL injection vulnerability (high 7.2)
- [CVE-2017-5345](https://insights.sbomify.com/CVE-2017-5345/): SQL injection in metalgenix:genixcms (high 8.8)
- [CVE-2017-5344](https://insights.sbomify.com/CVE-2017-5344/): SQL injection in dotcms:dotcms (critical 9.8)
- [CVE-2017-5342](https://insights.sbomify.com/CVE-2017-5342/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-5341](https://insights.sbomify.com/CVE-2017-5341/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-5340](https://insights.sbomify.com/CVE-2017-5340/): Integer overflow in netapp:clustered data ontap (critical 9.8)
- [CVE-2017-5337](https://insights.sbomify.com/CVE-2017-5337/): Memory corruption in gnu:gnutls (critical 9.8)
- [CVE-2017-5336](https://insights.sbomify.com/CVE-2017-5336/): Memory corruption in gnu:gnutls (critical 9.8)
- [CVE-2017-5335](https://insights.sbomify.com/CVE-2017-5335/): Denial of service in gnu:gnutls (high 7.5)
- [CVE-2017-5334](https://insights.sbomify.com/CVE-2017-5334/): Memory corruption in gnu:gnutls (critical 9.8)
- [CVE-2017-5333](https://insights.sbomify.com/CVE-2017-5333/): Integer overflow in icoutils (high 7.8)
- [CVE-2017-5332](https://insights.sbomify.com/CVE-2017-5332/): Memory corruption in icoutils (high 7.8)
- [CVE-2017-5331](https://insights.sbomify.com/CVE-2017-5331/): Integer overflow in icoutils (high 7.8)
- [CVE-2017-5330](https://insights.sbomify.com/CVE-2017-5330/): Command injection in fedoraproject:fedora (high 7.8)
- [CVE-2017-5329](https://insights.sbomify.com/CVE-2017-5329/): Memory corruption in paloaltonetworks:terminal services agent (high 7.8)
- [CVE-2017-5328](https://insights.sbomify.com/CVE-2017-5328/): Auth bypass in paloaltonetworks:terminal services agent (high 7.5)
- [CVE-2017-5264](https://insights.sbomify.com/CVE-2017-5264/): Cross-site request forgery in Nexpose (high 8.8)
- [CVE-2017-5263](https://insights.sbomify.com/CVE-2017-5263/): Cross-site request forgery in cnPilot (high 8.0)
- [CVE-2017-5262](https://insights.sbomify.com/CVE-2017-5262/): Information disclosure in cnPilot (high 8.0)
- [CVE-2017-5261](https://insights.sbomify.com/CVE-2017-5261/): Path traversal in cnPilot (high 8.8)
- [CVE-2017-5260](https://insights.sbomify.com/CVE-2017-5260/): Missing authorization in cnPilot (high 8.8)
- [CVE-2017-5259](https://insights.sbomify.com/CVE-2017-5259/): Hardcoded credentials in cnPilot (high 8.8)
- [CVE-2017-5258](https://insights.sbomify.com/CVE-2017-5258/): Cross-site scripting in ePMP (medium 5.4)
- [CVE-2017-5257](https://insights.sbomify.com/CVE-2017-5257/): Cross-site scripting in ePMP (medium 5.4)
- [CVE-2017-5256](https://insights.sbomify.com/CVE-2017-5256/): Cross-site scripting in ePMP (medium 5.4)
- [CVE-2017-5255](https://insights.sbomify.com/CVE-2017-5255/): Command injection in ePMP (high 8.8)
- [CVE-2017-5254](https://insights.sbomify.com/CVE-2017-5254/): Privilege escalation in ePMP (high 8.8)
- [CVE-2017-5251](https://insights.sbomify.com/CVE-2017-5251/): Weak cryptography in Insteon Hub Firmware (high 8.1)
- [CVE-2017-5250](https://insights.sbomify.com/CVE-2017-5250/): Information disclosure in Insteon for Hub (critical 9.8)
- [CVE-2017-5249](https://insights.sbomify.com/CVE-2017-5249/): Information disclosure in Wink - Smart Home (critical 9.8)
- [CVE-2017-5247](https://insights.sbomify.com/CVE-2017-5247/): Cross-site scripting in Secure File Transfer (medium 5.4)
- [CVE-2017-5246](https://insights.sbomify.com/CVE-2017-5246/): Code injection in Secure File Transfer (medium 4.3)
- [CVE-2017-5244](https://insights.sbomify.com/CVE-2017-5244/): Cross-site request forgery in Metasploit (Pro, Express, and Community editions) (low 3.5)
- [CVE-2017-5243](https://insights.sbomify.com/CVE-2017-5243/): Weak cryptography in Nexpose hardware appliance (high 8.5)
- [CVE-2017-5242](https://insights.sbomify.com/CVE-2017-5242/): Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key (high 7.7)
- [CVE-2017-5241](https://insights.sbomify.com/CVE-2017-5241/): Cross-site scripting in Secure File Transfer (medium 5.4)
- [CVE-2017-5240](https://insights.sbomify.com/CVE-2017-5240/): Memory corruption in AppSpider Pro (high 7.5)
- [CVE-2017-5239](https://insights.sbomify.com/CVE-2017-5239/): Weak cryptography in EV-07S GPS Tracker (high 7.5)
- [CVE-2017-5238](https://insights.sbomify.com/CVE-2017-5238/): Memory corruption in EV-07S GPS Tracker (medium 5.3)
- [CVE-2017-5237](https://insights.sbomify.com/CVE-2017-5237/): Auth bypass in EV-07S GPS Tracker (high 7.5)
- [CVE-2017-5236](https://insights.sbomify.com/CVE-2017-5236/): Other in AppSpider Pro (high 7.8)
- [CVE-2017-5235](https://insights.sbomify.com/CVE-2017-5235/): Other in Metasploit Pro (high 7.8)
- [CVE-2017-5234](https://insights.sbomify.com/CVE-2017-5234/): Other in Insight Collector (high 7.8)
- [CVE-2017-5233](https://insights.sbomify.com/CVE-2017-5233/): Other in AppSpider Pro (high 7.8)
- [CVE-2017-5232](https://insights.sbomify.com/CVE-2017-5232/): Other in Nexpose (high 7.8)
- [CVE-2017-5231](https://insights.sbomify.com/CVE-2017-5231/): Path traversal in Metasploit (high 7.1)
- [CVE-2017-5230](https://insights.sbomify.com/CVE-2017-5230/): Hardcoded credentials in Nexpose (high 7.2)
- [CVE-2017-5229](https://insights.sbomify.com/CVE-2017-5229/): Path traversal in Metasploit (high 7.1)
- [CVE-2017-5228](https://insights.sbomify.com/CVE-2017-5228/): Path traversal in Metasploit (high 7.1)
- [CVE-2017-5227](https://insights.sbomify.com/CVE-2017-5227/): Information disclosure in qnap:qts (high 7.5)
- [CVE-2017-5226](https://insights.sbomify.com/CVE-2017-5226/): Security feature bypass in projectatomic:bubblewrap (critical 10.0)
- [CVE-2017-5225](https://insights.sbomify.com/CVE-2017-5225/): Memory corruption in libtiff:libtiff (high 8.8)
- [CVE-2017-5223](https://insights.sbomify.com/CVE-2017-5223/): Local file disclosure in PHPMailer (medium 5.5)
- [CVE-2017-5219](https://insights.sbomify.com/CVE-2017-5219/): Path traversal in sagecrm:sagecrm (critical 9.8)
- [CVE-2017-5218](https://insights.sbomify.com/CVE-2017-5218/): SQL injection in sagecrm:sagecrm (high 8.8)
- [CVE-2017-5217](https://insights.sbomify.com/CVE-2017-5217/): Denial of service in samsung:samsung mobile (medium 5.5)
- [CVE-2017-5216](https://insights.sbomify.com/CVE-2017-5216/): Memory corruption in netop:remote control (medium 5.5)
- [CVE-2017-5215](https://insights.sbomify.com/CVE-2017-5215/): File upload in codextrous:b2j contact (critical 9.8)
- [CVE-2017-5214](https://insights.sbomify.com/CVE-2017-5214/): Weak cryptography in codextrous:b2j contact (high 7.5)
- [CVE-2017-5213](https://insights.sbomify.com/CVE-2017-5213/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2017-5212](https://insights.sbomify.com/CVE-2017-5212/): Missing authorization in open-xchange:open-xchange appsuite (critical 9.8)
- [CVE-2017-5211](https://insights.sbomify.com/CVE-2017-5211/): Other in open-xchange:open-xchange appsuite (high 7.5)
- [CVE-2017-5210](https://insights.sbomify.com/CVE-2017-5210/): Information disclosure in open-xchange:open-xchange appsuite (critical 9.8)
- [CVE-2017-5209](https://insights.sbomify.com/CVE-2017-5209/): Memory corruption in libimobiledevice:libplist (critical 9.1)
- [CVE-2017-5208](https://insights.sbomify.com/CVE-2017-5208/): Integer overflow in debian:debian linux (high 8.8)
- [CVE-2017-5207](https://insights.sbomify.com/CVE-2017-5207/): Privilege escalation in firejail project:firejail (high 7.8)
- [CVE-2017-5206](https://insights.sbomify.com/CVE-2017-5206/): Security feature bypass in firejail project:firejail (critical 9.0)
- [CVE-2017-5205](https://insights.sbomify.com/CVE-2017-5205/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-5204](https://insights.sbomify.com/CVE-2017-5204/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-5203](https://insights.sbomify.com/CVE-2017-5203/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-5202](https://insights.sbomify.com/CVE-2017-5202/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-5201](https://insights.sbomify.com/CVE-2017-5201/): Information disclosure in netapp:clustered data ontap (medium 5.7)
- [CVE-2017-5200](https://insights.sbomify.com/CVE-2017-5200/): SaltStack Salt arbitrary command execution in Salt-api via ssh_client (high 8.8)
- [CVE-2017-5199](https://insights.sbomify.com/CVE-2017-5199/): Code injection in solarwinds:log and event manager (high 8.8)
- [CVE-2017-5198](https://insights.sbomify.com/CVE-2017-5198/): Privilege escalation in solarwinds:log and event manager (high 8.8)
- [CVE-2017-5197](https://insights.sbomify.com/CVE-2017-5197/): Silverstripe CMS XSS Vulnerability (medium 6.1)
- [CVE-2017-5196](https://insights.sbomify.com/CVE-2017-5196/): Memory corruption in irssi:irssi (high 7.5)
- [CVE-2017-5195](https://insights.sbomify.com/CVE-2017-5195/): Memory corruption in irssi:irssi (high 7.5)
- [CVE-2017-5194](https://insights.sbomify.com/CVE-2017-5194/): Use after free in debian:debian linux (high 7.5)
- [CVE-2017-5193](https://insights.sbomify.com/CVE-2017-5193/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2017-5192](https://insights.sbomify.com/CVE-2017-5192/): SaltStack Salt Authentication Bypass when using the local_batch client from salt-api (high 8.8)
- [CVE-2017-5191](https://insights.sbomify.com/CVE-2017-5191/): Cross-site scripting in NetIQ Access Manager 4.2 and NetIQ Access Manager 4.3 (medium 6.1)
- [CVE-2017-5190](https://insights.sbomify.com/CVE-2017-5190/): Race condition in NAM Identity Server and SAML2 Service Provider (low 3.1)
- [CVE-2017-5189](https://insights.sbomify.com/CVE-2017-5189/): private SSL key embedded in JAR file in iManager (medium 4.3)
- [CVE-2017-5188](https://insights.sbomify.com/CVE-2017-5188/): OBS worker VM escape via relative symbolic links (medium 5.0)
- [CVE-2017-5187](https://insights.sbomify.com/CVE-2017-5187/): Cross-site request forgery in Micro Focus Enterprise Developer, Micro Focus Enterprise Server (high 8.8)
- [CVE-2017-5186](https://insights.sbomify.com/CVE-2017-5186/): Weak cryptography in NetIQ/Novell iManager and eDirectory (high 7.5)
- [CVE-2017-5185](https://insights.sbomify.com/CVE-2017-5185/): Denial of service in NetIQ Sentinel Server (high 7.5)
- [CVE-2017-5184](https://insights.sbomify.com/CVE-2017-5184/): Information disclosure in NetIQ Sentinel Server (medium 5.3)
- [CVE-2017-5183](https://insights.sbomify.com/CVE-2017-5183/): Cross-site scripting in Identity Server (medium 6.1)
- [CVE-2017-5182](https://insights.sbomify.com/CVE-2017-5182/): Path traversal in Open Enterprise Server (high 7.5)
- [CVE-2017-5180](https://insights.sbomify.com/CVE-2017-5180/): Security feature bypass in firejail project:firejail (high 8.8)
- [CVE-2017-5179](https://insights.sbomify.com/CVE-2017-5179/): Cross-site scripting in tenable:nessus (medium 5.4)
- [CVE-2017-5178](https://insights.sbomify.com/CVE-2017-5178/): Hardcoded credentials in Schneider Electric Wonderware Intelligence 2014R3 and prior (critical 9.8)
- [CVE-2017-5177](https://insights.sbomify.com/CVE-2017-5177/): Memory corruption in VIPA Controls WinPLC7 (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/41/