# Vulnerabilities published in 2017


- [CVE-2017-2751](https://insights.sbomify.com/CVE-2017-2751/): Information disclosure in HP 240 G1 Notebook PC and certain other consumer notebooks (medium 4.6)
- [CVE-2017-2750](https://insights.sbomify.com/CVE-2017-2750/): Security feature bypass in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP OfficeJet Enterprise printers (critical 9.8)
- [CVE-2017-2748](https://insights.sbomify.com/CVE-2017-2748/): Weak cryptography in Isaac Mizrahi Smartwatch Mobile App (high 7.5)
- [CVE-2017-2747](https://insights.sbomify.com/CVE-2017-2747/): Information disclosure in HP Designjet printers; HP Latex printers (high 7.8)
- [CVE-2017-2746](https://insights.sbomify.com/CVE-2017-2746/): Cross-site scripting in HP JetAdvantage Security Manager (medium 6.1)
- [CVE-2017-2745](https://insights.sbomify.com/CVE-2017-2745/): Cross-site scripting in HP JetAdvantage Security Manager (medium 6.1)
- [CVE-2017-2744](https://insights.sbomify.com/CVE-2017-2744/): Information disclosure in HP Support Assistant (medium 5.5)
- [CVE-2017-2743](https://insights.sbomify.com/CVE-2017-2743/): Cross-site scripting in HP Enterprise LaserJet Printers and MFPs; HP OfficeJet Enterprise Color Printers and MFP; HP PageWide Color Printers and MPS (medium 6.1)
- [CVE-2017-2742](https://insights.sbomify.com/CVE-2017-2742/): Denial of service in HP Web Jetadmin (high 7.5)
- [CVE-2017-2741](https://insights.sbomify.com/CVE-2017-2741/): Other in HP PageWide Printers; HP OfficeJet Pro Printers (critical 9.8)
- [CVE-2017-2740](https://insights.sbomify.com/CVE-2017-2740/): Privilege escalation in HP ThinPro (high 7.8)
- [CVE-2017-2739](https://insights.sbomify.com/CVE-2017-2739/): Supply chain in Vmall (low 3.1)
- [CVE-2017-2738](https://insights.sbomify.com/CVE-2017-2738/): Auth bypass in VCM5010 (critical 9.8)
- [CVE-2017-2737](https://insights.sbomify.com/CVE-2017-2737/): File upload in VCM5010 (high 8.8)
- [CVE-2017-2736](https://insights.sbomify.com/CVE-2017-2736/): Command injection in VCM5010 (high 7.2)
- [CVE-2017-2735](https://insights.sbomify.com/CVE-2017-2735/): Missing authorization in TIT-AL00 (high 7.1)
- [CVE-2017-2734](https://insights.sbomify.com/CVE-2017-2734/): Denial of service in P9 Plus (medium 5.5)
- [CVE-2017-2733](https://insights.sbomify.com/CVE-2017-2733/): Information disclosure in Honor 6X (medium 5.5)
- [CVE-2017-2732](https://insights.sbomify.com/CVE-2017-2732/): Information disclosure in HUAWEI HiLink APP (for IOS) (medium 5.5)
- [CVE-2017-2731](https://insights.sbomify.com/CVE-2017-2731/): Denial of service in P9 Plus (medium 5.5)
- [CVE-2017-2730](https://insights.sbomify.com/CVE-2017-2730/): Information disclosure in HUAWEI HiLink APP (for IOS), HUAWEI Tech Support APP (for IOS) (low 3.5)
- [CVE-2017-2729](https://insights.sbomify.com/CVE-2017-2729/): Memory corruption in Honor 5A (high 7.8)
- [CVE-2017-2728](https://insights.sbomify.com/CVE-2017-2728/): Auth bypass in Honor 6X (medium 6.4)
- [CVE-2017-2727](https://insights.sbomify.com/CVE-2017-2727/): Auth bypass in Huawei P9 (medium 4.3)
- [CVE-2017-2726](https://insights.sbomify.com/CVE-2017-2726/): Memory corruption in P10 Plus,P10 (high 8.4)
- [CVE-2017-2725](https://insights.sbomify.com/CVE-2017-2725/): Memory corruption in P10 Plus,P10 (high 7.8)
- [CVE-2017-2724](https://insights.sbomify.com/CVE-2017-2724/): Memory corruption in P10 Plus,P10 (high 8.4)
- [CVE-2017-2723](https://insights.sbomify.com/CVE-2017-2723/): Information disclosure in Files (medium 6.7)
- [CVE-2017-2722](https://insights.sbomify.com/CVE-2017-2722/): Other in DP300,TE60,TP3106,ViewPoint 9030,eCNS210 TD,eSpace 7950,eSpace IAD,eSpace U1981 (high 8.8)
- [CVE-2017-2721](https://insights.sbomify.com/CVE-2017-2721/): Auth bypass in Berlin-L21,Berlin-L21HN,Berlin-L22,Berlin-L22HN,Berlin-L23,Berlin-L24HN,FRD-L02,FRD-L04,FRD-L09,FRD-L14,FRD-L19, (medium 4.6)
- [CVE-2017-2720](https://insights.sbomify.com/CVE-2017-2720/): Hardcoded credentials in FusionSphere OpenStack (medium 5.3)
- [CVE-2017-2719](https://insights.sbomify.com/CVE-2017-2719/): Command injection in FusionSphere OpenStack (high 8.8)
- [CVE-2017-2718](https://insights.sbomify.com/CVE-2017-2718/): Command injection in FusionSphere OpenStack (high 8.8)
- [CVE-2017-2717](https://insights.sbomify.com/CVE-2017-2717/): Integer overflow in honor 8 Pro (medium 6.5)
- [CVE-2017-2716](https://insights.sbomify.com/CVE-2017-2716/): Memory corruption in Mate 9 (high 7.8)
- [CVE-2017-2715](https://insights.sbomify.com/CVE-2017-2715/): Weak cryptography in Files £¨Files is the smartphone APP£© (high 7.8)
- [CVE-2017-2714](https://insights.sbomify.com/CVE-2017-2714/): Memory corruption in FusionSphere OpenStack (high 8.0)
- [CVE-2017-2713](https://insights.sbomify.com/CVE-2017-2713/): Other in HUAWEI P9 (medium 5.4)
- [CVE-2017-2712](https://insights.sbomify.com/CVE-2017-2712/): Denial of service in S3300 (medium 5.3)
- [CVE-2017-2711](https://insights.sbomify.com/CVE-2017-2711/): Denial of service in P9 Plus (medium 5.5)
- [CVE-2017-2710](https://insights.sbomify.com/CVE-2017-2710/): Security feature bypass in Beethoven-W09A, CRR-L09 (medium 4.6)
- [CVE-2017-2709](https://insights.sbomify.com/CVE-2017-2709/): Denial of service in HiGame, SkyTone (medium 5.5)
- [CVE-2017-2708](https://insights.sbomify.com/CVE-2017-2708/): Auth bypass in Nice (medium 4.6)
- [CVE-2017-2707](https://insights.sbomify.com/CVE-2017-2707/): Privilege escalation in Mate 9 (high 7.1)
- [CVE-2017-2706](https://insights.sbomify.com/CVE-2017-2706/): Path traversal in Mate 9 (high 7.1)
- [CVE-2017-2705](https://insights.sbomify.com/CVE-2017-2705/): Auth bypass in Huawei P9 (low 2.4)
- [CVE-2017-2704](https://insights.sbomify.com/CVE-2017-2704/): Information disclosure in Smarthome,HiAPP,HwParentControl,HwParentControlParent,Crowdtest,HiWallet,Huawei Pay,Skytone,HwCloudDrive(EMUI6.0),HwPhoneFinder?¡§EMUI6.0??,HwPhoneFinder?¡§EMUI5.1??,HiCinema,HuaweiWear,HiHealthApp, (high 7.5)
- [CVE-2017-2703](https://insights.sbomify.com/CVE-2017-2703/): Security feature bypass in Mate 9, P9 (medium 6.8)
- [CVE-2017-2702](https://insights.sbomify.com/CVE-2017-2702/): Security feature bypass in Mate 9 (medium 6.8)
- [CVE-2017-2701](https://insights.sbomify.com/CVE-2017-2701/): Denial of service in Mate 9 (low 3.3)
- [CVE-2017-2700](https://insights.sbomify.com/CVE-2017-2700/): Denial of service in AC6005,AC6605 (high 7.5)
- [CVE-2017-2699](https://insights.sbomify.com/CVE-2017-2699/): File upload in Honor 7, Mate S,LYO-L21 (high 7.8)
- [CVE-2017-2698](https://insights.sbomify.com/CVE-2017-2698/): Memory corruption in P8 (high 7.8)
- [CVE-2017-2697](https://insights.sbomify.com/CVE-2017-2697/): Memory corruption in huawei:gt3 firmware (high 7.8)
- [CVE-2017-2696](https://insights.sbomify.com/CVE-2017-2696/): Memory corruption in Y6¢ò (high 7.8)
- [CVE-2017-2695](https://insights.sbomify.com/CVE-2017-2695/): Path traversal in TIT-AL00 (medium 5.5)
- [CVE-2017-2694](https://insights.sbomify.com/CVE-2017-2694/): Missing authorization in HwVmall (low 3.3)
- [CVE-2017-2693](https://insights.sbomify.com/CVE-2017-2693/): Path traversal in P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, (high 7.8)
- [CVE-2017-2692](https://insights.sbomify.com/CVE-2017-2692/): Command injection in P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, (high 7.8)
- [CVE-2017-2691](https://insights.sbomify.com/CVE-2017-2691/): Auth bypass in Huawei P9 (medium 6.8)
- [CVE-2017-2690](https://insights.sbomify.com/CVE-2017-2690/): Denial of service in SoftCo,eSpace U1910,eSpace U1911,eSpace U1930,eSpace U1960,eSpace U1980,eSpace U1981 (medium 5.5)
- [CVE-2017-2689](https://insights.sbomify.com/CVE-2017-2689/): Auth bypass in RUGGEDCOM ROX I All versions (high 8.8)
- [CVE-2017-2688](https://insights.sbomify.com/CVE-2017-2688/): Cross-site request forgery in RUGGEDCOM ROX I All versions (high 8.8)
- [CVE-2017-2687](https://insights.sbomify.com/CVE-2017-2687/): Cross-site scripting in RUGGEDCOM ROX I All versions (medium 6.1)
- [CVE-2017-2686](https://insights.sbomify.com/CVE-2017-2686/): Information disclosure in RUGGEDCOM ROX I All versions (medium 6.5)
- [CVE-2017-2685](https://insights.sbomify.com/CVE-2017-2685/): Security feature bypass in SINUMERIK Integrate Operate Clients 2.x and 3.x (high 7.4)
- [CVE-2017-2684](https://insights.sbomify.com/CVE-2017-2684/): Auth bypass in SIMATIC Logon All versions < V1.5 SP3 Update 2 (critical 9.0)
- [CVE-2017-2683](https://insights.sbomify.com/CVE-2017-2683/): Cross-site scripting in RUGGEDCOM NMS All versions < V2.1 (Windows and Linux) (high 8.2)
- [CVE-2017-2682](https://insights.sbomify.com/CVE-2017-2682/): Cross-site request forgery in RUGGEDCOM NMS All versions < V2.1 (Windows and Linux) (high 8.8)
- [CVE-2017-2681](https://insights.sbomify.com/CVE-2017-2681/): Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (high 7.1)
- [CVE-2017-2680](https://insights.sbomify.com/CVE-2017-2680/): Denial of service in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (high 7.1)
- [CVE-2017-2675](https://insights.sbomify.com/CVE-2017-2675/): Privilege escalation in Little Snitch (high 7.8)
- [CVE-2017-2674](https://insights.sbomify.com/CVE-2017-2674/): Cross-site scripting in business-central (medium 6.1)
- [CVE-2017-2673](https://insights.sbomify.com/CVE-2017-2673/): OpenStack Identity service (keystone) Incorrect Authorization (medium 6.8)
- [CVE-2017-2672](https://insights.sbomify.com/CVE-2017-2672/): Information disclosure in foreman (medium 6.5)
- [CVE-2017-2671](https://insights.sbomify.com/CVE-2017-2671/): Race condition in linux:linux kernel (medium 5.5)
- [CVE-2017-2670](https://insights.sbomify.com/CVE-2017-2670/): Moderate severity vulnerability that affects io.undertow:undertow-core (high 7.5)
- [CVE-2017-2669](https://insights.sbomify.com/CVE-2017-2669/): Denial of service in dovecot (low 3.7)
- [CVE-2017-2668](https://insights.sbomify.com/CVE-2017-2668/): Null dereference in 389-ds-base (medium 6.5)
- [CVE-2017-2667](https://insights.sbomify.com/CVE-2017-2667/): hammer_cli_foreman Improper Certificate Validation vulnerability (high 8.1)
- [CVE-2017-2666](https://insights.sbomify.com/CVE-2017-2666/): Undertow-core vulnerable to HTTP Request Smuggling (medium 6.5)
- [CVE-2017-2665](https://insights.sbomify.com/CVE-2017-2665/): Information disclosure in rhscon-core (medium 4.8)
- [CVE-2017-2664](https://insights.sbomify.com/CVE-2017-2664/): Privilege escalation in CloudForms (medium 6.5)
- [CVE-2017-2663](https://insights.sbomify.com/CVE-2017-2663/): Missing authorization in subscription-manager (high 8.2)
- [CVE-2017-2662](https://insights.sbomify.com/CVE-2017-2662/): katello Improper Privilege Management vulnerability (medium 4.3)
- [CVE-2017-2661](https://insights.sbomify.com/CVE-2017-2661/): Cross-site scripting in pcs (medium 6.1)
- [CVE-2017-2659](https://insights.sbomify.com/CVE-2017-2659/): Information disclosure in dropbear (medium 5.3)
- [CVE-2017-2658](https://insights.sbomify.com/CVE-2017-2658/): Other in BPMS (low 2.6)
- [CVE-2017-2654](https://insights.sbomify.com/CVE-2017-2654/): Emails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin (low 3.7)
- [CVE-2017-2653](https://insights.sbomify.com/CVE-2017-2653/): Cross-site request forgery in CloudForms (medium 4.1)
- [CVE-2017-2652](https://insights.sbomify.com/CVE-2017-2652/): Missing permission checks in Jenkins Distributed Fork Plugin (high 8.8)
- [CVE-2017-2651](https://insights.sbomify.com/CVE-2017-2651/): Exposure of Sensitive Information to an Unauthorized Actor in Jenkins-mailer-plugin (low 3.7)
- [CVE-2017-2650](https://insights.sbomify.com/CVE-2017-2650/): Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass (high 8.5)
- [CVE-2017-2649](https://insights.sbomify.com/CVE-2017-2649/): Jenkins Active Directory Plugin did not verify certificate of AD server (high 8.1)
- [CVE-2017-2648](https://insights.sbomify.com/CVE-2017-2648/): Jenkins SSH Build Agents Plugin did not verify host keys (medium 6.8)
- [CVE-2017-2647](https://insights.sbomify.com/CVE-2017-2647/): Null dereference in linux:linux kernel (high 7.8)
- [CVE-2017-2646](https://insights.sbomify.com/CVE-2017-2646/): Keycloak vulnerable to infinite loop based Denial of Service (high 7.5)
- [CVE-2017-2645](https://insights.sbomify.com/CVE-2017-2645/): Moodle XSS in attachments to evidence of prior learning (medium 6.1)
- [CVE-2017-2644](https://insights.sbomify.com/CVE-2017-2644/): Moodle XSS Vulnerability (medium 6.1)
- [CVE-2017-2643](https://insights.sbomify.com/CVE-2017-2643/): Moodle Global search displays user names for unauthenticated users (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/55/