# Vulnerabilities published in 2017


- [CVE-2017-18579](https://insights.sbomify.com/CVE-2017-18579/): Cross-site scripting in dwbooster:corner ad (medium 6.1)
- [CVE-2017-18578](https://insights.sbomify.com/CVE-2017-18578/): Cross-site scripting in crafty social buttons project:crafty social buttons (medium 6.1)
- [CVE-2017-18577](https://insights.sbomify.com/CVE-2017-18577/): Cross-site scripting in ibericode:mailchimp for wordpress (medium 6.1)
- [CVE-2017-18576](https://insights.sbomify.com/CVE-2017-18576/): Cross-site scripting in event notifier project:event notifier (medium 6.1)
- [CVE-2017-18575](https://insights.sbomify.com/CVE-2017-18575/): Cross-site scripting in newstatpress project:newstatpress (medium 6.1)
- [CVE-2017-18574](https://insights.sbomify.com/CVE-2017-18574/): Cross-site scripting in ninjaforms:ninja forms (medium 6.1)
- [CVE-2017-18573](https://insights.sbomify.com/CVE-2017-18573/): SQL injection in simplerealtytheme:simple login log (critical 9.8)
- [CVE-2017-18572](https://insights.sbomify.com/CVE-2017-18572/): Cross-site scripting in sir:gnucommerce (medium 6.1)
- [CVE-2017-18571](https://insights.sbomify.com/CVE-2017-18571/): SQL injection in search everything project:search everything (critical 9.8)
- [CVE-2017-18570](https://insights.sbomify.com/CVE-2017-18570/): SQL injection in cformsii project:cformsii (critical 9.8)
- [CVE-2017-18569](https://insights.sbomify.com/CVE-2017-18569/): Cross-site request forgery in mythemeshop:my wp translate (high 8.8)
- [CVE-2017-18568](https://insights.sbomify.com/CVE-2017-18568/): Cross-site scripting in mythemeshop:my wp translate (medium 6.1)
- [CVE-2017-18567](https://insights.sbomify.com/CVE-2017-18567/): Cross-site scripting in soflyy:wp all import (medium 6.1)
- [CVE-2017-18566](https://insights.sbomify.com/CVE-2017-18566/): Cross-site scripting in bestwebsoft:user role (medium 6.1)
- [CVE-2017-18565](https://insights.sbomify.com/CVE-2017-18565/): Cross-site scripting in bestwebsoft:updater (medium 6.1)
- [CVE-2017-18564](https://insights.sbomify.com/CVE-2017-18564/): Cross-site scripting in bestwebsoft:sender (medium 6.1)
- [CVE-2017-18563](https://insights.sbomify.com/CVE-2017-18563/): Cross-site scripting in swimordiesoftware:rsvp (medium 6.1)
- [CVE-2017-18562](https://insights.sbomify.com/CVE-2017-18562/): Cross-site scripting in bestwebsoft:error log viewer (medium 6.1)
- [CVE-2017-18561](https://insights.sbomify.com/CVE-2017-18561/): Cross-site scripting in embed images in comments project:embed images in comments (medium 6.1)
- [CVE-2017-18560](https://insights.sbomify.com/CVE-2017-18560/): Cross-site scripting in content audit project:content audit (medium 6.1)
- [CVE-2017-18559](https://insights.sbomify.com/CVE-2017-18559/): Cross-site scripting in cformsii project:cformsii (medium 6.1)
- [CVE-2017-18558](https://insights.sbomify.com/CVE-2017-18558/): Cross-site scripting in bestwebsoft:testimonials (medium 6.1)
- [CVE-2017-18557](https://insights.sbomify.com/CVE-2017-18557/): Cross-site scripting in bestwebsoft:google maps (medium 6.1)
- [CVE-2017-18556](https://insights.sbomify.com/CVE-2017-18556/): Cross-site scripting in bestwebsoft:google analytics (medium 6.1)
- [CVE-2017-18555](https://insights.sbomify.com/CVE-2017-18555/): Cross-site scripting in mediaburst:booking calendar (medium 6.1)
- [CVE-2017-18554](https://insights.sbomify.com/CVE-2017-18554/): Cross-site scripting in analytics tracker project:analytics tracker (medium 6.1)
- [CVE-2017-18553](https://insights.sbomify.com/CVE-2017-18553/): Cross-site scripting in ad buttons project:ad buttons (medium 6.1)
- [CVE-2017-18552](https://insights.sbomify.com/CVE-2017-18552/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2017-18551](https://insights.sbomify.com/CVE-2017-18551/): Memory corruption in linux:linux kernel (medium 6.7)
- [CVE-2017-18550](https://insights.sbomify.com/CVE-2017-18550/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-18549](https://insights.sbomify.com/CVE-2017-18549/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-18548](https://insights.sbomify.com/CVE-2017-18548/): SQL injection in datainterlock:note press (critical 9.8)
- [CVE-2017-18547](https://insights.sbomify.com/CVE-2017-18547/): Cross-site request forgery in neliosoftware:nelio ab testing (high 8.8)
- [CVE-2017-18546](https://insights.sbomify.com/CVE-2017-18546/): Cross-site request forgery in jayj quicktag project:jayj quicktag (high 8.8)
- [CVE-2017-18545](https://insights.sbomify.com/CVE-2017-18545/): Cross-site scripting in invite anyone project:invite anyone (high 7.5)
- [CVE-2017-18544](https://insights.sbomify.com/CVE-2017-18544/): Cross-site request forgery in invite anyone project:invite anyone (high 8.8)
- [CVE-2017-18543](https://insights.sbomify.com/CVE-2017-18543/): Missing authorization in invite anyone project:invite anyone (critical 9.8)
- [CVE-2017-18542](https://insights.sbomify.com/CVE-2017-18542/): Cross-site scripting in bestwebsoft:zendesk help center (medium 6.1)
- [CVE-2017-18541](https://insights.sbomify.com/CVE-2017-18541/): Cross-site scripting in xakuro:xo security (medium 6.1)
- [CVE-2017-18540](https://insights.sbomify.com/CVE-2017-18540/): Cross-site scripting in deepsoft:weblibrarian (medium 6.1)
- [CVE-2017-18539](https://insights.sbomify.com/CVE-2017-18539/): Cross-site scripting in deepsoft:weblibrarian (medium 6.1)
- [CVE-2017-18538](https://insights.sbomify.com/CVE-2017-18538/): Cross-site scripting in deepsoft:weblibrarian (medium 6.1)
- [CVE-2017-18537](https://insights.sbomify.com/CVE-2017-18537/): Cross-site scripting in bestwebsoft:visitors online (medium 6.1)
- [CVE-2017-18536](https://insights.sbomify.com/CVE-2017-18536/): Cross-site scripting in fullworksplugins:stop user enumeration (medium 6.1)
- [CVE-2017-18535](https://insights.sbomify.com/CVE-2017-18535/): Cross-site scripting in smokesignal project:smokesignal (medium 6.1)
- [CVE-2017-18534](https://insights.sbomify.com/CVE-2017-18534/): Cross-site scripting in share on diaspora project:share on diaspora (medium 6.1)
- [CVE-2017-18533](https://insights.sbomify.com/CVE-2017-18533/): Cross-site scripting in rimons twitter widget project:rimons twitter widget (medium 6.1)
- [CVE-2017-18532](https://insights.sbomify.com/CVE-2017-18532/): Cross-site scripting in bestwebsoft:realty (medium 6.1)
- [CVE-2017-18531](https://insights.sbomify.com/CVE-2017-18531/): Cross-site scripting in raygun:raygun4wp (medium 6.1)
- [CVE-2017-18530](https://insights.sbomify.com/CVE-2017-18530/): Cross-site scripting in bestwebsoft:rating (medium 6.1)
- [CVE-2017-18529](https://insights.sbomify.com/CVE-2017-18529/): Cross-site scripting in bestwebsoft:promobar (medium 6.1)
- [CVE-2017-18528](https://insights.sbomify.com/CVE-2017-18528/): Cross-site scripting in bestwebsoft:pdf \& print (medium 6.1)
- [CVE-2017-18527](https://insights.sbomify.com/CVE-2017-18527/): Cross-site scripting in bestwebsoft:pagination (medium 6.1)
- [CVE-2017-18526](https://insights.sbomify.com/CVE-2017-18526/): Cross-site scripting in lamp-solutions:moreads se (medium 6.1)
- [CVE-2017-18525](https://insights.sbomify.com/CVE-2017-18525/): Cross-site scripting in megamenu:max mega menu (medium 6.1)
- [CVE-2017-18524](https://insights.sbomify.com/CVE-2017-18524/): Cross-site scripting in antoineh:football pool (medium 6.1)
- [CVE-2017-18523](https://insights.sbomify.com/CVE-2017-18523/): Cross-site request forgery in eelv newsletter project:eelv newsletter (high 8.8)
- [CVE-2017-18522](https://insights.sbomify.com/CVE-2017-18522/): Cross-site scripting in eelv newsletter project:eelv newsletter (medium 6.1)
- [CVE-2017-18521](https://insights.sbomify.com/CVE-2017-18521/): Cross-site request forgery in wp-kama:democracy poll (high 8.8)
- [CVE-2017-18520](https://insights.sbomify.com/CVE-2017-18520/): Cross-site scripting in wp-kama:democracy poll (medium 6.1)
- [CVE-2017-18519](https://insights.sbomify.com/CVE-2017-18519/): Cross-site scripting in marvinlabs:wp customer area (medium 6.1)
- [CVE-2017-18518](https://insights.sbomify.com/CVE-2017-18518/): Cross-site scripting in bestwebsoft:smtp (medium 6.1)
- [CVE-2017-18517](https://insights.sbomify.com/CVE-2017-18517/): Cross-site scripting in bestwebsoft:pinterest (medium 6.1)
- [CVE-2017-18516](https://insights.sbomify.com/CVE-2017-18516/): Cross-site scripting in bestwebsoft:linkedin (medium 6.1)
- [CVE-2017-18515](https://insights.sbomify.com/CVE-2017-18515/): SQL injection in veronalabs:wp statistics (critical 9.8)
- [CVE-2017-18514](https://insights.sbomify.com/CVE-2017-18514/): SQL injection in simplerealtytheme:simple login log (critical 9.8)
- [CVE-2017-18513](https://insights.sbomify.com/CVE-2017-18513/): Cross-site request forgery in expresstech:responsive menu (high 8.8)
- [CVE-2017-18512](https://insights.sbomify.com/CVE-2017-18512/): Cross-site request forgery in supsystic:newsletter by supsystic (high 8.8)
- [CVE-2017-18511](https://insights.sbomify.com/CVE-2017-18511/): Cross-site request forgery in wpmudev:custom sidebars (high 8.8)
- [CVE-2017-18510](https://insights.sbomify.com/CVE-2017-18510/): Cross-site request forgery in wpmudev:custom sidebars (high 8.8)
- [CVE-2017-18509](https://insights.sbomify.com/CVE-2017-18509/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-18508](https://insights.sbomify.com/CVE-2017-18508/): Cross-site scripting in 3cx:live chat (medium 6.1)
- [CVE-2017-18507](https://insights.sbomify.com/CVE-2017-18507/): Cross-site scripting in 3cx:live chat (medium 6.1)
- [CVE-2017-18506](https://insights.sbomify.com/CVE-2017-18506/): Cross-site scripting in wpovernight:woocommerce pdf invoices\& packing slips (medium 6.1)
- [CVE-2017-18505](https://insights.sbomify.com/CVE-2017-18505/): Cross-site scripting in bestwebsoft:twitter button (medium 6.1)
- [CVE-2017-18504](https://insights.sbomify.com/CVE-2017-18504/): Cross-site request forgery in wpdeveloper:twitter cards meta (high 8.8)
- [CVE-2017-18503](https://insights.sbomify.com/CVE-2017-18503/): Cross-site scripting in wpdeveloper:twitter cards meta (medium 6.1)
- [CVE-2017-18502](https://insights.sbomify.com/CVE-2017-18502/): Cross-site scripting in bestwebsoft:subscriber (medium 6.1)
- [CVE-2017-18501](https://insights.sbomify.com/CVE-2017-18501/): Cross-site scripting in bestwebsoft:social login (medium 6.1)
- [CVE-2017-18500](https://insights.sbomify.com/CVE-2017-18500/): Cross-site scripting in bestwebsoft:social buttons pack (medium 6.1)
- [CVE-2017-18499](https://insights.sbomify.com/CVE-2017-18499/): Cross-site scripting in simple-membership-plugin:simple membership (medium 6.1)
- [CVE-2017-18498](https://insights.sbomify.com/CVE-2017-18498/): Cross-site scripting in presstigers:simple job board (medium 6.1)
- [CVE-2017-18497](https://insights.sbomify.com/CVE-2017-18497/): Cross-site scripting in w3eden:live forms (medium 6.1)
- [CVE-2017-18496](https://insights.sbomify.com/CVE-2017-18496/): Cross-site scripting in bestwebsoft:htaccess (medium 6.1)
- [CVE-2017-18495](https://insights.sbomify.com/CVE-2017-18495/): Cross-site scripting in mediaburst:gravity forms (medium 6.1)
- [CVE-2017-18494](https://insights.sbomify.com/CVE-2017-18494/): Cross-site scripting in bestwebsoft:custom search (medium 6.1)
- [CVE-2017-18493](https://insights.sbomify.com/CVE-2017-18493/): Cross-site scripting in bestwebsoft:custom admin page (medium 6.1)
- [CVE-2017-18492](https://insights.sbomify.com/CVE-2017-18492/): Cross-site scripting in bestwebsoft:contact form to db (medium 6.1)
- [CVE-2017-18491](https://insights.sbomify.com/CVE-2017-18491/): Cross-site scripting in bestwebsoft:contact form (medium 6.1)
- [CVE-2017-18490](https://insights.sbomify.com/CVE-2017-18490/): Cross-site scripting in bestwebsoft:contact form multi (medium 6.1)
- [CVE-2017-18489](https://insights.sbomify.com/CVE-2017-18489/): Cross-site scripting in mediaburst:contact form 7 - clockwork sms (medium 6.1)
- [CVE-2017-18488](https://insights.sbomify.com/CVE-2017-18488/): Cross-site scripting in backup-guard:backup guard (medium 6.1)
- [CVE-2017-18487](https://insights.sbomify.com/CVE-2017-18487/): Cross-site scripting in google adsense project:google adsense (medium 6.1)
- [CVE-2017-18486](https://insights.sbomify.com/CVE-2017-18486/): Weak cryptography in jitbit:helpdesk (high 7.2)
- [CVE-2017-18485](https://insights.sbomify.com/CVE-2017-18485/): Cross-site request forgery in elementalpath:cognitoys dino firmware (medium 5.4)
- [CVE-2017-18484](https://insights.sbomify.com/CVE-2017-18484/): Cross-site scripting in elementalpath:cognitoys dino firmware (medium 6.1)
- [CVE-2017-18483](https://insights.sbomify.com/CVE-2017-18483/): Cross-site scripting in annke:sp1 firmware (medium 6.1)
- [CVE-2017-18482](https://insights.sbomify.com/CVE-2017-18482/): Missing authorization in cpanel:cpanel (medium 6.5)
- [CVE-2017-18481](https://insights.sbomify.com/CVE-2017-18481/): Cross-site scripting in cpanel:cpanel (medium 5.4)
- [CVE-2017-18480](https://insights.sbomify.com/CVE-2017-18480/): Missing authorization in cpanel:cpanel (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/67/