# Vulnerabilities published in 2017


- [CVE-2017-20186](https://insights.sbomify.com/CVE-2017-20186/): nikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of service (low 3.5)
- [CVE-2017-20185](https://insights.sbomify.com/CVE-2017-20185/): Fuzzy SWMP GET Parameter swmp.php cross site scripting (low 3.5)
- [CVE-2017-20184](https://insights.sbomify.com/CVE-2017-20184/): Carlo Gavazzi Powersoft prone to Path Traversal (high 7.5)
- [CVE-2017-20183](https://insights.sbomify.com/CVE-2017-20183/): External Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scripting (low 3.5)
- [CVE-2017-20182](https://insights.sbomify.com/CVE-2017-20182/): Mobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting (low 3.5)
- [CVE-2017-20181](https://insights.sbomify.com/CVE-2017-20181/): hgzojer Vocable Trainer VocableTrainerProvider.java path traversal (medium 5.3)
- [CVE-2017-20180](https://insights.sbomify.com/CVE-2017-20180/): Zerocoin libzerocoin Proof CoinSpend.cpp CoinSpend data authenticity (medium 4.6)
- [CVE-2017-20179](https://insights.sbomify.com/CVE-2017-20179/): InSTEDD Pollit tour_controller.rb TourController Privilege Escalation (medium 6.3)
- [CVE-2017-20178](https://insights.sbomify.com/CVE-2017-20178/): Codiad process.php saveJSON information disclosure (low 3.1)
- [CVE-2017-20177](https://insights.sbomify.com/CVE-2017-20177/): WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting (low 3.5)
- [CVE-2017-20176](https://insights.sbomify.com/CVE-2017-20176/): ciubotaru share-on-diaspora new_window.php cross site scripting (low 3.5)
- [CVE-2017-20175](https://insights.sbomify.com/CVE-2017-20175/): DaSchTour matomo-mediawiki-extension Username Piwik.hooks.php cross site scripting (low 2.6)
- [CVE-2017-20174](https://insights.sbomify.com/CVE-2017-20174/): bastianallgeier Kirby Webmentions Plugin injection (medium 5.6)
- [CVE-2017-20173](https://insights.sbomify.com/CVE-2017-20173/): AlexRed contentmap contentmap.php Load sql injection (medium 5.5)
- [CVE-2017-20172](https://insights.sbomify.com/CVE-2017-20172/): ridhoq soundslike songs.py get_song_relations sql injection (medium 5.5)
- [CVE-2017-20171](https://insights.sbomify.com/CVE-2017-20171/): PrivateSky apersistence mysqlUtils.js sql injection (medium 5.5)
- [CVE-2017-20170](https://insights.sbomify.com/CVE-2017-20170/): ollpu parontalli index.php sql injection (medium 5.5)
- [CVE-2017-20169](https://insights.sbomify.com/CVE-2017-20169/): GGGGGGGG ToN-MasterServer svr_request_pub.php sql injection (medium 5.5)
- [CVE-2017-20168](https://insights.sbomify.com/CVE-2017-20168/): jfm-so piWallet api.php sql injection (medium 5.5)
- [CVE-2017-20167](https://insights.sbomify.com/CVE-2017-20167/): Minichan reports.php cross site scripting (low 3.5)
- [CVE-2017-20166](https://insights.sbomify.com/CVE-2017-20166/): Ecto missing `is_nil` requirement (critical 9.8)
- [CVE-2017-20165](https://insights.sbomify.com/CVE-2017-20165/): debug-js debug node.js useColors redos (low 3.5)
- [CVE-2017-20164](https://insights.sbomify.com/CVE-2017-20164/): Symbiote Seed Login SecurityLoginExtension.php onBeforeSecurityLogin redirect (medium 6.3)
- [CVE-2017-20163](https://insights.sbomify.com/CVE-2017-20163/): Red Snapper NView Session.php mutate sql injection (medium 5.5)
- [CVE-2017-20162](https://insights.sbomify.com/CVE-2017-20162/): vercel ms index.js parse redos (medium 4.3)
- [CVE-2017-20161](https://insights.sbomify.com/CVE-2017-20161/): rofl0r MacGeiger ESSID macgeiger.c dump_wlan_at injection (medium 4.6)
- [CVE-2017-20160](https://insights.sbomify.com/CVE-2017-20160/): flitto express-param fetchParams.js parameter pollution (medium 6.3)
- [CVE-2017-20159](https://insights.sbomify.com/CVE-2017-20159/): rf Keynote rumble.rb cross site scripting (low 3.5)
- [CVE-2017-20158](https://insights.sbomify.com/CVE-2017-20158/): vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting (low 3.5)
- [CVE-2017-20157](https://insights.sbomify.com/CVE-2017-20157/): Ariadne Component Library Url.php server-side request forgery (medium 5.5)
- [CVE-2017-20156](https://insights.sbomify.com/CVE-2017-20156/): Exciting Printer Argument prepare_page.rb command injection (medium 5.5)
- [CVE-2017-20155](https://insights.sbomify.com/CVE-2017-20155/): Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting (low 3.5)
- [CVE-2017-20154](https://insights.sbomify.com/CVE-2017-20154/): ghostlander Phoenixcoin main.cpp accept denial of service (low 3.5)
- [CVE-2017-20153](https://insights.sbomify.com/CVE-2017-20153/): aerouk imageserve cross site scripting (low 2.6)
- [CVE-2017-20152](https://insights.sbomify.com/CVE-2017-20152/): aerouk imageserve File viewer.php path traversal (low 3.1)
- [CVE-2017-20151](https://insights.sbomify.com/CVE-2017-20151/): iText RUPS XfaFile.java xml external entity reference (medium 5.5)
- [CVE-2017-20150](https://insights.sbomify.com/CVE-2017-20150/): challenge website sql injection (medium 5.5)
- [CVE-2017-20149](https://insights.sbomify.com/CVE-2017-20149/): Memory corruption in mikrotik:routeros (critical 9.8)
- [CVE-2017-20148](https://insights.sbomify.com/CVE-2017-20148/): Privilege escalation in debian:logcheck (critical 9.8)
- [CVE-2017-20147](https://insights.sbomify.com/CVE-2017-20147/): Misconfiguration in smokeping:smokeping (medium 6.5)
- [CVE-2017-20146](https://insights.sbomify.com/CVE-2017-20146/): Improper access control in github.com/gorilla/handlers (critical 9.8)
- [CVE-2017-20145](https://insights.sbomify.com/CVE-2017-20145/): Tecrail Responsive Filemanger path traversal (medium 6.3)
- [CVE-2017-20144](https://insights.sbomify.com/CVE-2017-20144/): Anvsoft PDFMate PDF Converter Pro memory corruption (medium 6.3)
- [CVE-2017-20143](https://insights.sbomify.com/CVE-2017-20143/): Itech Movie Portal Script film-rating.php Error sql injection (medium 6.3)
- [CVE-2017-20142](https://insights.sbomify.com/CVE-2017-20142/): Itech Movie Portal Script artist-display.php Union sql injection (medium 6.3)
- [CVE-2017-20141](https://insights.sbomify.com/CVE-2017-20141/): Itech Movie Portal Script movie.php Union sql injection (medium 6.3)
- [CVE-2017-20140](https://insights.sbomify.com/CVE-2017-20140/): Itech Movie Portal Script movie.php Reflected cross site scripting (medium 4.3)
- [CVE-2017-20139](https://insights.sbomify.com/CVE-2017-20139/): Itech Movie Portal Script show_news.php Error sql injection (medium 6.3)
- [CVE-2017-20138](https://insights.sbomify.com/CVE-2017-20138/): Itech Auction Script mcategory.php Blind sql injection (medium 6.3)
- [CVE-2017-20137](https://insights.sbomify.com/CVE-2017-20137/): Itech B2B Script catcompany.php sql injection (medium 6.3)
- [CVE-2017-20136](https://insights.sbomify.com/CVE-2017-20136/): Itech Classifieds Script subpage.php sql injection (medium 6.3)
- [CVE-2017-20135](https://insights.sbomify.com/CVE-2017-20135/): Itech Dating Script see_more_details.php sql injection (medium 6.3)
- [CVE-2017-20134](https://insights.sbomify.com/CVE-2017-20134/): Itech Freelancer Script category.php sql injection (medium 6.3)
- [CVE-2017-20133](https://insights.sbomify.com/CVE-2017-20133/): Itech Job Portal Script admin improper authentication (high 7.3)
- [CVE-2017-20132](https://insights.sbomify.com/CVE-2017-20132/): Itech Multi Vendor Script product-list.php sql injection (medium 6.3)
- [CVE-2017-20131](https://insights.sbomify.com/CVE-2017-20131/): Itech News Portal information.php sql injection (medium 6.3)
- [CVE-2017-20130](https://insights.sbomify.com/CVE-2017-20130/): Itech Real Estate Script search_property.php sql injection (medium 6.3)
- [CVE-2017-20129](https://insights.sbomify.com/CVE-2017-20129/): LogoStore search.php sql injection (medium 6.3)
- [CVE-2017-20128](https://insights.sbomify.com/CVE-2017-20128/): KB Messages PHP Script sql injection (high 7.3)
- [CVE-2017-20127](https://insights.sbomify.com/CVE-2017-20127/): KB Login Authentication Script sql injection (high 7.3)
- [CVE-2017-20126](https://insights.sbomify.com/CVE-2017-20126/): KB Affiliate Referral Script index.php sql injection (high 7.3)
- [CVE-2017-20125](https://insights.sbomify.com/CVE-2017-20125/): Online Hotel Booking System Pro roomtype-details.php sql injection (medium 6.3)
- [CVE-2017-20124](https://insights.sbomify.com/CVE-2017-20124/): Online Hotel Booking System Pro Plugin roomtype-details.php sql injection (medium 6.3)
- [CVE-2017-20123](https://insights.sbomify.com/CVE-2017-20123/): Viscosity DLL untrusted search path (high 8.8)
- [CVE-2017-20122](https://insights.sbomify.com/CVE-2017-20122/): Bitrix Site Manager Contact Form cross site scripting (low 3.5)
- [CVE-2017-20121](https://insights.sbomify.com/CVE-2017-20121/): Teradici Management Console Database Management privileges management (high 7.8)
- [CVE-2017-20120](https://insights.sbomify.com/CVE-2017-20120/): TrueConf Server cross-site request forgery (medium 4.3)
- [CVE-2017-20119](https://insights.sbomify.com/CVE-2017-20119/): TrueConf Server change-lang redirect (low 3.5)
- [CVE-2017-20118](https://insights.sbomify.com/CVE-2017-20118/): TrueConf Server DOM cross site scripting (low 3.5)
- [CVE-2017-20117](https://insights.sbomify.com/CVE-2017-20117/): TrueConf Server group DOM cross site scripting (low 3.5)
- [CVE-2017-20116](https://insights.sbomify.com/CVE-2017-20116/): TrueConf Server Reflected cross site scripting (low 3.5)
- [CVE-2017-20115](https://insights.sbomify.com/CVE-2017-20115/): TrueConf Server Reflected cross site scripting (low 3.5)
- [CVE-2017-20114](https://insights.sbomify.com/CVE-2017-20114/): TrueConf Server Reflected cross site scripting (low 3.5)
- [CVE-2017-20113](https://insights.sbomify.com/CVE-2017-20113/): TrueConf Server Stored cross site scripting (low 3.5)
- [CVE-2017-20112](https://insights.sbomify.com/CVE-2017-20112/): IVPN Client privileges management (high 7.8)
- [CVE-2017-20111](https://insights.sbomify.com/CVE-2017-20111/): Teleopti WFM Administration privileges management (high 7.3)
- [CVE-2017-20110](https://insights.sbomify.com/CVE-2017-20110/): Teleopti WFM Administration Credentials information disclosure (medium 4.3)
- [CVE-2017-20109](https://insights.sbomify.com/CVE-2017-20109/): Teleopti WFM Administration GetOneTenant Credentials information disclosure (medium 4.3)
- [CVE-2017-20108](https://insights.sbomify.com/CVE-2017-20108/): Easy Table Plugin options-general.php cross site scripting (low 3.5)
- [CVE-2017-20107](https://insights.sbomify.com/CVE-2017-20107/): ShadeYouVPN.com Client privileges management (medium 5.3)
- [CVE-2017-20106](https://insights.sbomify.com/CVE-2017-20106/): Lithium Forum Compose Message server-side request forgery (medium 5.3)
- [CVE-2017-20105](https://insights.sbomify.com/CVE-2017-20105/): Simplessus path traversal (medium 5.4)
- [CVE-2017-20104](https://insights.sbomify.com/CVE-2017-20104/): Simplessus Cookie Time sql injection (high 7.3)
- [CVE-2017-20103](https://insights.sbomify.com/CVE-2017-20103/): Kama Click Counter Plugin admin.php Blind sql injection (medium 6.3)
- [CVE-2017-20102](https://insights.sbomify.com/CVE-2017-20102/): Album Lock getImage path traversal (medium 4.4)
- [CVE-2017-20101](https://insights.sbomify.com/CVE-2017-20101/): ProjectSend information disclosure (low 3.5)
- [CVE-2017-20100](https://insights.sbomify.com/CVE-2017-20100/): Air Transfer cross site scripting (low 3.5)
- [CVE-2017-20099](https://insights.sbomify.com/CVE-2017-20099/): Analytics Stats Counter Statistics Plugin code injection (high 7.3)
- [CVE-2017-20098](https://insights.sbomify.com/CVE-2017-20098/): Admin Custom Login Plugin Persistent cross site scripting (low 3.5)
- [CVE-2017-20097](https://insights.sbomify.com/CVE-2017-20097/): WP-Filebase Download Manager Plugin cross site scriting (low 3.5)
- [CVE-2017-20096](https://insights.sbomify.com/CVE-2017-20096/): WP-SpamFree Anti-Spam Plugin cross site scriting (low 3.5)
- [CVE-2017-20095](https://insights.sbomify.com/CVE-2017-20095/): Simple Ads Manager Plugin code injection (medium 6.3)
- [CVE-2017-20094](https://insights.sbomify.com/CVE-2017-20094/): NewStatPress Plugin Persistent cross site scriting (low 3.5)
- [CVE-2017-20093](https://insights.sbomify.com/CVE-2017-20093/): Download Manager Plugin cross-site request forgery (medium 4.3)
- [CVE-2017-20092](https://insights.sbomify.com/CVE-2017-20092/): Google Analytics Dashboard Plugin cross site scriting (low 3.5)
- [CVE-2017-20091](https://insights.sbomify.com/CVE-2017-20091/): File Manager Plugin cross-site request forgery (medium 4.3)
- [CVE-2017-20090](https://insights.sbomify.com/CVE-2017-20090/): Global Content Blocks Plugin cross-site request forgery (medium 4.3)
- [CVE-2017-20089](https://insights.sbomify.com/CVE-2017-20089/): Gwolle Guestbook Plugin cross site scriting (low 3.5)
- [CVE-2017-20088](https://insights.sbomify.com/CVE-2017-20088/): Atahualpa Theme cross-site request forgery (medium 4.3)
- [CVE-2017-20087](https://insights.sbomify.com/CVE-2017-20087/): Alpine PhotoTile for Instagram Plugin cross site scriting (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/62/