# Vulnerabilities published in 2017


- [CVE-2017-17719](https://insights.sbomify.com/CVE-2017-17719/): Cross-site scripting in olyos:wp-concours (medium 6.1)
- [CVE-2017-17718](https://insights.sbomify.com/CVE-2017-17718/): net-ldap Improper Certificate Validation vulnerability (medium 5.9)
- [CVE-2017-17717](https://insights.sbomify.com/CVE-2017-17717/): Weak cryptography in sonatype:nexus repository manager (critical 9.8)
- [CVE-2017-17716](https://insights.sbomify.com/CVE-2017-17716/): Security feature bypass in gitlab:gitlab (medium 5.9)
- [CVE-2017-17715](https://insights.sbomify.com/CVE-2017-17715/): Path traversal in telegram:telegram messenger (high 8.8)
- [CVE-2017-17714](https://insights.sbomify.com/CVE-2017-17714/): Cross-site scripting in boxug:trape (medium 6.1)
- [CVE-2017-17713](https://insights.sbomify.com/CVE-2017-17713/): SQL injection in boxug:trape (critical 9.8)
- [CVE-2017-17712](https://insights.sbomify.com/CVE-2017-17712/): Race condition in linux:linux kernel (high 7.0)
- [CVE-2017-17708](https://insights.sbomify.com/CVE-2017-17708/): Missing authorization in pleasantsolutions:pleasant password server (medium 4.3)
- [CVE-2017-17707](https://insights.sbomify.com/CVE-2017-17707/): Missing authorization in pleasantsolutions:pleasant password server (high 8.1)
- [CVE-2017-17704](https://insights.sbomify.com/CVE-2017-17704/): Weak cryptography in swhouse:istar ultra firmware (high 7.4)
- [CVE-2017-17703](https://insights.sbomify.com/CVE-2017-17703/): Cross-site scripting in synacor:zimbra collaboration suite (medium 6.1)
- [CVE-2017-17701](https://insights.sbomify.com/CVE-2017-17701/): Null dereference in k7computing:antivirus (critical 9.8)
- [CVE-2017-17700](https://insights.sbomify.com/CVE-2017-17700/): Null dereference in k7computing:antivirus (critical 9.8)
- [CVE-2017-17699](https://insights.sbomify.com/CVE-2017-17699/): Null dereference in k7computing:antivirus (critical 9.8)
- [CVE-2017-17698](https://insights.sbomify.com/CVE-2017-17698/): Cross-site scripting in zohocorp:manageengine password manager pro (medium 6.1)
- [CVE-2017-17697](https://insights.sbomify.com/CVE-2017-17697/): Server-side request forgery in linuxfoundation:harbor (high 8.6)
- [CVE-2017-17696](https://insights.sbomify.com/CVE-2017-17696/): Information disclosure in techno - portfolio management panel project:techno - portfolio management panel (medium 4.3)
- [CVE-2017-17695](https://insights.sbomify.com/CVE-2017-17695/): SQL injection in techno - portfolio management panel project:techno - portfolio management panel (high 8.8)
- [CVE-2017-17694](https://insights.sbomify.com/CVE-2017-17694/): Cross-site scripting in techno - portfolio management panel project:techno - portfolio management panel (medium 5.4)
- [CVE-2017-17693](https://insights.sbomify.com/CVE-2017-17693/): Missing authorization in techno - portfolio management panel project:techno - portfolio management panel (medium 4.3)
- [CVE-2017-17692](https://insights.sbomify.com/CVE-2017-17692/): Security feature bypass in samsung:internet browser (high 7.5)
- [CVE-2017-17691](https://insights.sbomify.com/CVE-2017-17691/): Information disclosure in contronics:homeputer cl studio fur homematic (high 8.1)
- [CVE-2017-1769](https://insights.sbomify.com/CVE-2017-1769/): Cross-site request forgery in Business Process Manager (high 8.8)
- [CVE-2017-17689](https://insights.sbomify.com/CVE-2017-17689/): Weak cryptography in 9folders:nine (medium 5.9)
- [CVE-2017-17688](https://insights.sbomify.com/CVE-2017-17688/): Weak cryptography in apple:mail (medium 5.9)
- [CVE-2017-17684](https://insights.sbomify.com/CVE-2017-17684/): Memory corruption in pandasecurity:panda global protection (high 7.5)
- [CVE-2017-17683](https://insights.sbomify.com/CVE-2017-17683/): Memory corruption in pandasecurity:panda global protection (high 7.5)
- [CVE-2017-17682](https://insights.sbomify.com/CVE-2017-17682/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-17681](https://insights.sbomify.com/CVE-2017-17681/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-17680](https://insights.sbomify.com/CVE-2017-17680/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-1768](https://insights.sbomify.com/CVE-2017-1768/): Information disclosure in Security Guardium Big Data Intelligence (medium 4.3)
- [CVE-2017-17678](https://insights.sbomify.com/CVE-2017-17678/): Cross-site scripting in bmc:remedy mid-tier (medium 6.1)
- [CVE-2017-17677](https://insights.sbomify.com/CVE-2017-17677/): Code injection in bmc:remedy mid-tier (high 8.8)
- [CVE-2017-17675](https://insights.sbomify.com/CVE-2017-17675/): Information disclosure in bmc:remedy mid-tier (medium 5.3)
- [CVE-2017-17674](https://insights.sbomify.com/CVE-2017-17674/): Server-side request forgery in bmc:remedy mid-tier (critical 9.8)
- [CVE-2017-17672](https://insights.sbomify.com/CVE-2017-17672/): Deserialization in vbulletin:vbulletin (critical 9.8)
- [CVE-2017-17671](https://insights.sbomify.com/CVE-2017-17671/): Path traversal in vbulletin:vbulletin (critical 9.8)
- [CVE-2017-17670](https://insights.sbomify.com/CVE-2017-17670/): Use after free in debian:debian linux (high 8.8)
- [CVE-2017-1767](https://insights.sbomify.com/CVE-2017-1767/): Cross-site scripting in Business Process Manager (medium 5.4)
- [CVE-2017-17669](https://insights.sbomify.com/CVE-2017-17669/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17668](https://insights.sbomify.com/CVE-2017-17668/): Missing authorization in ncr:s1 dispenser controller firmware (high 7.5)
- [CVE-2017-17665](https://insights.sbomify.com/CVE-2017-17665/): Missing authorization in octopus:octopus deploy (high 8.8)
- [CVE-2017-17664](https://insights.sbomify.com/CVE-2017-17664/): Memory corruption in digium:asterisk (medium 5.9)
- [CVE-2017-17663](https://insights.sbomify.com/CVE-2017-17663/): Memory corruption in acme:mini httpd (critical 9.8)
- [CVE-2017-17662](https://insights.sbomify.com/CVE-2017-17662/): Path traversal in yawcam:yawcam (high 7.5)
- [CVE-2017-1766](https://insights.sbomify.com/CVE-2017-1766/): Missing authorization in Business Process Manager (medium 4.3)
- [CVE-2017-17659](https://insights.sbomify.com/CVE-2017-17659/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17658](https://insights.sbomify.com/CVE-2017-17658/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17657](https://insights.sbomify.com/CVE-2017-17657/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17656](https://insights.sbomify.com/CVE-2017-17656/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17655](https://insights.sbomify.com/CVE-2017-17655/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17654](https://insights.sbomify.com/CVE-2017-17654/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17653](https://insights.sbomify.com/CVE-2017-17653/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17652](https://insights.sbomify.com/CVE-2017-17652/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17651](https://insights.sbomify.com/CVE-2017-17651/): SQL injection in paid to read script project:paid to read script (critical 9.8)
- [CVE-2017-1765](https://insights.sbomify.com/CVE-2017-1765/): Information disclosure in Business Process Manager (low 3.1)
- [CVE-2017-17649](https://insights.sbomify.com/CVE-2017-17649/): Cross-site scripting in readymade video sharing script project:readymade video sharing script (medium 6.1)
- [CVE-2017-17648](https://insights.sbomify.com/CVE-2017-17648/): SQL injection in entrepreneur dating script project:entrepreneur dating script (critical 9.8)
- [CVE-2017-17645](https://insights.sbomify.com/CVE-2017-17645/): SQL injection in phpautoclassifiedscript:bus booking script (critical 9.8)
- [CVE-2017-17643](https://insights.sbomify.com/CVE-2017-17643/): SQL injection in lynda clone project:lynda clone (critical 9.8)
- [CVE-2017-17642](https://insights.sbomify.com/CVE-2017-17642/): SQL injection in basic job site script project:basic job site script (critical 9.8)
- [CVE-2017-17641](https://insights.sbomify.com/CVE-2017-17641/): SQL injection in resume clone script project:resume clone script (critical 9.8)
- [CVE-2017-17640](https://insights.sbomify.com/CVE-2017-17640/): SQL injection in advanced world database project:advanced world database (critical 9.8)
- [CVE-2017-1764](https://insights.sbomify.com/CVE-2017-1764/): Information disclosure in Cognos Business Intelligence (high 7.0)
- [CVE-2017-17639](https://insights.sbomify.com/CVE-2017-17639/): SQL injection in muslim matrimonial script project:muslim matrimonial script (critical 9.8)
- [CVE-2017-17638](https://insights.sbomify.com/CVE-2017-17638/): SQL injection in groupon clone script project:groupon clone script (critical 9.8)
- [CVE-2017-17637](https://insights.sbomify.com/CVE-2017-17637/): SQL injection in car rental script project:car rental script (critical 9.8)
- [CVE-2017-17636](https://insights.sbomify.com/CVE-2017-17636/): SQL injection in mlm forced matrix project:mlm forced matrix (critical 9.8)
- [CVE-2017-17635](https://insights.sbomify.com/CVE-2017-17635/): SQL injection in mlm forex market plan script project:mlm forex market plan script (critical 9.8)
- [CVE-2017-17634](https://insights.sbomify.com/CVE-2017-17634/): SQL injection in single theater booking script project:single theater booking script (critical 9.8)
- [CVE-2017-17633](https://insights.sbomify.com/CVE-2017-17633/): SQL injection in multiplex movie theater booking script project:multiplex movie theater booking script (critical 9.8)
- [CVE-2017-17632](https://insights.sbomify.com/CVE-2017-17632/): SQL injection in responsive events and movie ticket booking script project:responsive events and movie ticket booking script (critical 9.8)
- [CVE-2017-17631](https://insights.sbomify.com/CVE-2017-17631/): SQL injection in multireligion responsive matrimonial project:multireligion responsive matrimonial (critical 9.8)
- [CVE-2017-17630](https://insights.sbomify.com/CVE-2017-17630/): SQL injection in yoga class script project:yoga class script (critical 9.8)
- [CVE-2017-17629](https://insights.sbomify.com/CVE-2017-17629/): SQL injection in secure e-commerce script project:secure e-commerce script (critical 9.8)
- [CVE-2017-17628](https://insights.sbomify.com/CVE-2017-17628/): SQL injection in responsive realestate script project:responsive realestate script (critical 9.8)
- [CVE-2017-17627](https://insights.sbomify.com/CVE-2017-17627/): SQL injection in readymade video sharing script project:readymade video sharing script (critical 9.8)
- [CVE-2017-17626](https://insights.sbomify.com/CVE-2017-17626/): SQL injection in readymade php classified script project:readymade php classified script (critical 9.8)
- [CVE-2017-17625](https://insights.sbomify.com/CVE-2017-17625/): SQL injection in on demand marketplace script project:on demand marketplace script (critical 9.8)
- [CVE-2017-17624](https://insights.sbomify.com/CVE-2017-17624/): SQL injection in php multivendor ecommerce project:php multivendor ecommerce (critical 9.8)
- [CVE-2017-17623](https://insights.sbomify.com/CVE-2017-17623/): SQL injection in opensource classified ads script project:opensource classified ads script (critical 9.8)
- [CVE-2017-17622](https://insights.sbomify.com/CVE-2017-17622/): SQL injection in online exam test application script project:online exam test application script (critical 9.8)
- [CVE-2017-17621](https://insights.sbomify.com/CVE-2017-17621/): SQL injection in multivendor penny auction clone script project:multivendor penny auction clone script (critical 9.8)
- [CVE-2017-17620](https://insights.sbomify.com/CVE-2017-17620/): SQL injection in lawyer search script project:lawyer search script (critical 9.8)
- [CVE-2017-1762](https://insights.sbomify.com/CVE-2017-1762/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-17619](https://insights.sbomify.com/CVE-2017-17619/): SQL injection in laundry booking script project:laundry booking script (critical 9.8)
- [CVE-2017-17618](https://insights.sbomify.com/CVE-2017-17618/): SQL injection in kickstarter clone script project:kickstarter clone script (critical 9.8)
- [CVE-2017-17617](https://insights.sbomify.com/CVE-2017-17617/): SQL injection in foodspotting clone script project:foodspotting clone script (critical 9.8)
- [CVE-2017-17616](https://insights.sbomify.com/CVE-2017-17616/): SQL injection in event calendar category script project:event calendar category script (critical 9.8)
- [CVE-2017-17615](https://insights.sbomify.com/CVE-2017-17615/): SQL injection in facebook clone script project:facebook clone script (high 8.8)
- [CVE-2017-17614](https://insights.sbomify.com/CVE-2017-17614/): SQL injection in hotel restaurant reviews and feedback script project:hotel restaurant reviews and feedback script (critical 9.8)
- [CVE-2017-17613](https://insights.sbomify.com/CVE-2017-17613/): SQL injection in freelance website script project:freelance website script (critical 9.8)
- [CVE-2017-17612](https://insights.sbomify.com/CVE-2017-17612/): SQL injection in hot scripts clone project:hot scripts clone (critical 9.8)
- [CVE-2017-17611](https://insights.sbomify.com/CVE-2017-17611/): SQL injection in doctor search script project:doctor search script (critical 9.8)
- [CVE-2017-17610](https://insights.sbomify.com/CVE-2017-17610/): SQL injection in e-commerce mlm software project:e-commerce mlm software (critical 9.8)
- [CVE-2017-1761](https://insights.sbomify.com/CVE-2017-1761/): Cross-site scripting in WebSphere Portal (medium 6.1)
- [CVE-2017-17609](https://insights.sbomify.com/CVE-2017-17609/): SQL injection in chartered accountant booking script project:chartered accountant booking script (critical 9.8)
- [CVE-2017-17608](https://insights.sbomify.com/CVE-2017-17608/): SQL injection in kindergarten - elementary school listing script project:kindergarten - elementary school listing script (critical 9.8)
- [CVE-2017-17607](https://insights.sbomify.com/CVE-2017-17607/): SQL injection in cms auditor website project:cms auditor website (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/75/