# Vulnerabilities published in 2017


- [CVE-2017-17606](https://insights.sbomify.com/CVE-2017-17606/): SQL injection in co-work space search script project:co-work space search script (critical 9.8)
- [CVE-2017-17605](https://insights.sbomify.com/CVE-2017-17605/): SQL injection in consumer complaints clone script project:consumer complaints clone script (critical 9.8)
- [CVE-2017-17604](https://insights.sbomify.com/CVE-2017-17604/): SQL injection in entrepreneur bus booking script project:entrepreneur bus booking script (critical 9.8)
- [CVE-2017-17603](https://insights.sbomify.com/CVE-2017-17603/): SQL injection in advanced real estate script project:advanced real estate script (critical 9.8)
- [CVE-2017-17602](https://insights.sbomify.com/CVE-2017-17602/): SQL injection in advance b2b script project:advance b2b script (critical 9.8)
- [CVE-2017-17601](https://insights.sbomify.com/CVE-2017-17601/): SQL injection in cab booking script project:cab booking script (critical 9.8)
- [CVE-2017-17600](https://insights.sbomify.com/CVE-2017-17600/): SQL injection in basic b2b script project:basic b2b script (critical 9.8)
- [CVE-2017-1760](https://insights.sbomify.com/CVE-2017-1760/): Information disclosure in MQ (high 7.1)
- [CVE-2017-17599](https://insights.sbomify.com/CVE-2017-17599/): SQL injection in advance online learning management script project:advance online learning management script (critical 9.8)
- [CVE-2017-17598](https://insights.sbomify.com/CVE-2017-17598/): SQL injection in affiliate mlm script project:affiliate mlm script (critical 9.8)
- [CVE-2017-17597](https://insights.sbomify.com/CVE-2017-17597/): SQL injection in nearbuy clone script project:nearbuy clone script (critical 9.8)
- [CVE-2017-17596](https://insights.sbomify.com/CVE-2017-17596/): SQL injection in entrepreneur job portal script project:entrepreneur job portal script (critical 9.8)
- [CVE-2017-17595](https://insights.sbomify.com/CVE-2017-17595/): SQL injection in beauty parlour booking script project:beauty parlour booking script (critical 9.8)
- [CVE-2017-17594](https://insights.sbomify.com/CVE-2017-17594/): SQL injection in domainsale php script project:domainsale php script (critical 9.8)
- [CVE-2017-17593](https://insights.sbomify.com/CVE-2017-17593/): File upload in simple chatting system project:simple chatting system (high 7.5)
- [CVE-2017-17592](https://insights.sbomify.com/CVE-2017-17592/): SQL injection in website auction marketplace project:website auction marketplace (critical 9.8)
- [CVE-2017-17591](https://insights.sbomify.com/CVE-2017-17591/): SQL injection in realestate crowdfunding script project:realestate crowdfunding script (critical 9.8)
- [CVE-2017-17590](https://insights.sbomify.com/CVE-2017-17590/): SQL injection in stackoverflow-clone project:stackoverflow-clone (critical 9.8)
- [CVE-2017-17589](https://insights.sbomify.com/CVE-2017-17589/): SQL injection in thumbtack clone project:thumbtack clone (critical 9.8)
- [CVE-2017-17588](https://insights.sbomify.com/CVE-2017-17588/): SQL injection in imdb clone project:imdb clone (critical 9.8)
- [CVE-2017-17587](https://insights.sbomify.com/CVE-2017-17587/): SQL injection in indiamart clone project:indiamart clone (critical 9.8)
- [CVE-2017-17586](https://insights.sbomify.com/CVE-2017-17586/): SQL injection in olx clone project:olx clone (critical 9.8)
- [CVE-2017-17585](https://insights.sbomify.com/CVE-2017-17585/): SQL injection in monster clone project:monster clone (critical 9.8)
- [CVE-2017-17584](https://insights.sbomify.com/CVE-2017-17584/): SQL injection in makemytrip clone project:makemytrip clone (critical 9.8)
- [CVE-2017-17583](https://insights.sbomify.com/CVE-2017-17583/): SQL injection in shutterstock clone project:shutterstock clone (critical 9.8)
- [CVE-2017-17582](https://insights.sbomify.com/CVE-2017-17582/): SQL injection in grubhub clone project:grubhub clone (critical 9.8)
- [CVE-2017-17581](https://insights.sbomify.com/CVE-2017-17581/): SQL injection in quibids clone project:quibids clone (critical 9.8)
- [CVE-2017-17580](https://insights.sbomify.com/CVE-2017-17580/): SQL injection in linkedin clone project:linkedin clone (critical 9.8)
- [CVE-2017-1758](https://insights.sbomify.com/CVE-2017-1758/): XML external entity in Control Center (high 7.1)
- [CVE-2017-17579](https://insights.sbomify.com/CVE-2017-17579/): SQL injection in freelancer clone project:freelancer clone (critical 9.8)
- [CVE-2017-17578](https://insights.sbomify.com/CVE-2017-17578/): SQL injection in crowdfunding script project:crowdfunding script (critical 9.8)
- [CVE-2017-17577](https://insights.sbomify.com/CVE-2017-17577/): SQL injection in trademe clone project:trademe clone (critical 9.8)
- [CVE-2017-17576](https://insights.sbomify.com/CVE-2017-17576/): SQL injection in gigs script project:gigs script (critical 9.8)
- [CVE-2017-17575](https://insights.sbomify.com/CVE-2017-17575/): SQL injection in groupon clone project:groupon clone (critical 9.8)
- [CVE-2017-17574](https://insights.sbomify.com/CVE-2017-17574/): SQL injection in care clone project:care clone (critical 9.8)
- [CVE-2017-17573](https://insights.sbomify.com/CVE-2017-17573/): SQL injection in fortunescripts:ebay clone (critical 9.8)
- [CVE-2017-17572](https://insights.sbomify.com/CVE-2017-17572/): SQL injection in amazon clone project:amazon clone (critical 9.8)
- [CVE-2017-17571](https://insights.sbomify.com/CVE-2017-17571/): SQL injection in foodpanda clone project:foodpanda clone (critical 9.8)
- [CVE-2017-17570](https://insights.sbomify.com/CVE-2017-17570/): SQL injection in expedia clone project:expedia clone (critical 9.8)
- [CVE-2017-1757](https://insights.sbomify.com/CVE-2017-1757/): SQL injection in Security Guardium (high 8.8)
- [CVE-2017-17569](https://insights.sbomify.com/CVE-2017-17569/): Cross-site scripting in scubez:posty readymade classifieds (medium 6.1)
- [CVE-2017-17568](https://insights.sbomify.com/CVE-2017-17568/): Missing authorization in scubez:posty readymade classifieds (high 7.5)
- [CVE-2017-17567](https://insights.sbomify.com/CVE-2017-17567/): SQL injection in scubez:posty readymade classifieds (high 7.5)
- [CVE-2017-17566](https://insights.sbomify.com/CVE-2017-17566/): Privilege escalation in xen:xen (high 7.8)
- [CVE-2017-17565](https://insights.sbomify.com/CVE-2017-17565/): Denial of service in xen:xen (medium 5.6)
- [CVE-2017-17564](https://insights.sbomify.com/CVE-2017-17564/): Privilege escalation in xen:xen (high 7.8)
- [CVE-2017-17563](https://insights.sbomify.com/CVE-2017-17563/): Integer overflow in xen:xen (high 7.8)
- [CVE-2017-17562](https://insights.sbomify.com/CVE-2017-17562/): Embedthis GoAhead Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-17561](https://insights.sbomify.com/CVE-2017-17561/): Code injection in seacms project:seacms (high 7.2)
- [CVE-2017-17560](https://insights.sbomify.com/CVE-2017-17560/): File upload in westerndigital:my cloud pr4100 firmware (critical 9.8)
- [CVE-2017-1756](https://insights.sbomify.com/CVE-2017-1756/): Information disclosure in Business Process Manager (medium 4.0)
- [CVE-2017-17558](https://insights.sbomify.com/CVE-2017-17558/): Memory corruption in linux:linux kernel (medium 6.6)
- [CVE-2017-17557](https://insights.sbomify.com/CVE-2017-17557/): Memory corruption in foxitsoftware:foxit reader (high 8.8)
- [CVE-2017-17556](https://insights.sbomify.com/CVE-2017-17556/): Information disclosure in hp:synaptics touchpad driver (medium 5.1)
- [CVE-2017-17555](https://insights.sbomify.com/CVE-2017-17555/): Null dereference in aubio:aubio (medium 6.5)
- [CVE-2017-17554](https://insights.sbomify.com/CVE-2017-17554/): Aubio is vulnerable to a NULL pointer dereference (medium 5.5)
- [CVE-2017-17553](https://insights.sbomify.com/CVE-2017-17553/): Security feature bypass in changyou:dolphin (medium 5.3)
- [CVE-2017-17552](https://insights.sbomify.com/CVE-2017-17552/): Open redirect in zohocorp:manageengine admanager plus (high 8.8)
- [CVE-2017-17551](https://insights.sbomify.com/CVE-2017-17551/): Path traversal in changyou:dolphin (high 8.8)
- [CVE-2017-17550](https://insights.sbomify.com/CVE-2017-17550/): Cross-site request forgery in zyxel:zywall usg 100 firmware (high 8.8)
- [CVE-2017-1755](https://insights.sbomify.com/CVE-2017-1755/): Command injection in Security Identity Governance and Intelligence (medium 6.5)
- [CVE-2017-17549](https://insights.sbomify.com/CVE-2017-17549/): Information disclosure in citrix:application delivery controller firmware (medium 5.9)
- [CVE-2017-17544](https://insights.sbomify.com/CVE-2017-17544/): Privilege escalation in FortiOS (high 7.2)
- [CVE-2017-17543](https://insights.sbomify.com/CVE-2017-17543/): Weak cryptography in FortiClient SSLVPN Client for Linux (high 7.5)
- [CVE-2017-17541](https://insights.sbomify.com/CVE-2017-17541/): Cross-site scripting in Fortinet FortiManager, FortiAnalyzer (medium 6.1)
- [CVE-2017-17540](https://insights.sbomify.com/CVE-2017-17540/): Hardcoded credentials in FortiWLC (critical 9.8)
- [CVE-2017-17539](https://insights.sbomify.com/CVE-2017-17539/): Hardcoded credentials in FortiWLC (critical 9.8)
- [CVE-2017-17538](https://insights.sbomify.com/CVE-2017-17538/): Denial of service in mikrotik:router firmware (high 7.5)
- [CVE-2017-17537](https://insights.sbomify.com/CVE-2017-17537/): Denial of service in mikrotik:routerboard (high 7.5)
- [CVE-2017-17536](https://insights.sbomify.com/CVE-2017-17536/): Command injection in phacility:phabricator (high 8.8)
- [CVE-2017-17535](https://insights.sbomify.com/CVE-2017-17535/): Command injection in gjots2 project:gjots2 (high 8.8)
- [CVE-2017-17534](https://insights.sbomify.com/CVE-2017-17534/): Command injection in mensis project:mensis (high 8.8)
- [CVE-2017-17533](https://insights.sbomify.com/CVE-2017-17533/): Command injection in tkabber project:tkabber (high 8.8)
- [CVE-2017-17532](https://insights.sbomify.com/CVE-2017-17532/): Command injection in kiwi project:kiwi (high 8.8)
- [CVE-2017-17531](https://insights.sbomify.com/CVE-2017-17531/): Command injection in gnu:global (high 8.8)
- [CVE-2017-17530](https://insights.sbomify.com/CVE-2017-17530/): Command injection in geomview:geomview (high 8.8)
- [CVE-2017-1753](https://insights.sbomify.com/CVE-2017-1753/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-17529](https://insights.sbomify.com/CVE-2017-17529/): Command injection in abisource:abiword (high 8.8)
- [CVE-2017-17528](https://insights.sbomify.com/CVE-2017-17528/): Command injection in scummvm:scummvm (high 8.8)
- [CVE-2017-17527](https://insights.sbomify.com/CVE-2017-17527/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-17526](https://insights.sbomify.com/CVE-2017-17526/): Command injection in giac project:giac (high 8.8)
- [CVE-2017-17525](https://insights.sbomify.com/CVE-2017-17525/): Command injection in xtuple:postbooks (high 8.8)
- [CVE-2017-17524](https://insights.sbomify.com/CVE-2017-17524/): Command injection in swi-prolog:swi-prolog (high 8.8)
- [CVE-2017-17523](https://insights.sbomify.com/CVE-2017-17523/): Command injection in lilypond:lilypond (high 8.8)
- [CVE-2017-17522](https://insights.sbomify.com/CVE-2017-17522/): Command injection in python:python (high 8.8)
- [CVE-2017-17521](https://insights.sbomify.com/CVE-2017-17521/): Command injection in fontforge:fontforge (high 8.8)
- [CVE-2017-17520](https://insights.sbomify.com/CVE-2017-17520/): Command injection in debian:tin (high 8.8)
- [CVE-2017-1752](https://insights.sbomify.com/CVE-2017-1752/): Information disclosure in UrbanCode Deploy (medium 4.9)
- [CVE-2017-17519](https://insights.sbomify.com/CVE-2017-17519/): Command injection in ocaml batteries project:ocaml batteries (high 8.8)
- [CVE-2017-17518](https://insights.sbomify.com/CVE-2017-17518/): Command injection in white dune project:white dune (high 8.8)
- [CVE-2017-17517](https://insights.sbomify.com/CVE-2017-17517/): Command injection in sylpheed project:sylpheed (high 8.8)
- [CVE-2017-17516](https://insights.sbomify.com/CVE-2017-17516/): Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks (high 8.8)
- [CVE-2017-17515](https://insights.sbomify.com/CVE-2017-17515/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-17514](https://insights.sbomify.com/CVE-2017-17514/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-17513](https://insights.sbomify.com/CVE-2017-17513/): Command injection in tug:tex live (high 8.8)
- [CVE-2017-17512](https://insights.sbomify.com/CVE-2017-17512/): Command injection in sensible-utils project:sensible-utils (high 8.8)
- [CVE-2017-17511](https://insights.sbomify.com/CVE-2017-17511/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-1751](https://insights.sbomify.com/CVE-2017-1751/): Cross-site scripting in Robotic Process Automation with Automation Anywhere (medium 5.4)
- [CVE-2017-17509](https://insights.sbomify.com/CVE-2017-17509/): Memory corruption in hdfgroup:hdf5 (high 8.8)
- [CVE-2017-17508](https://insights.sbomify.com/CVE-2017-17508/): Denial of service in hdfgroup:hdf5 (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/76/