# Vulnerabilities published in 2017 - [CVE-2017-16644](https://insights.sbomify.com/CVE-2017-16644/): Denial of service in linux:linux kernel (medium 6.6) - [CVE-2017-16643](https://insights.sbomify.com/CVE-2017-16643/): Memory corruption in linux:linux kernel (medium 6.6) - [CVE-2017-16642](https://insights.sbomify.com/CVE-2017-16642/): Memory corruption in canonical:ubuntu linux (high 7.5) - [CVE-2017-16641](https://insights.sbomify.com/CVE-2017-16641/): Command injection in cacti:cacti (high 7.2) - [CVE-2017-1664](https://insights.sbomify.com/CVE-2017-1664/): Weak cryptography in Security Key Lifecycle Manager (medium 5.9) - [CVE-2017-16639](https://insights.sbomify.com/CVE-2017-16639/): Information disclosure in torproject:tor browser (medium 4.3) - [CVE-2017-16638](https://insights.sbomify.com/CVE-2017-16638/): Privilege escalation in vde project:vde (critical 9.8) - [CVE-2017-16637](https://insights.sbomify.com/CVE-2017-16637/): Other in perfect-privacy:vpn manager (medium 4.4) - [CVE-2017-16636](https://insights.sbomify.com/CVE-2017-16636/): Cross-site scripting in bludit:bludit (medium 5.4) - [CVE-2017-16635](https://insights.sbomify.com/CVE-2017-16635/): Cross-site scripting in tinywebgallery:tinywebgallery (medium 5.4) - [CVE-2017-16634](https://insights.sbomify.com/CVE-2017-16634/): Auth bypass in joomla:joomla\! (critical 9.8) - [CVE-2017-16633](https://insights.sbomify.com/CVE-2017-16633/): Information disclosure in joomla:joomla\! (medium 4.3) - [CVE-2017-16632](https://insights.sbomify.com/CVE-2017-16632/): Weak cryptography in sapphireims:sapphireims (high 7.5) - [CVE-2017-16631](https://insights.sbomify.com/CVE-2017-16631/): Missing authorization in sapphireims:sapphireims (medium 6.5) - [CVE-2017-16630](https://insights.sbomify.com/CVE-2017-16630/): Privilege escalation in sapphireims:sapphireims (high 8.8) - [CVE-2017-16629](https://insights.sbomify.com/CVE-2017-16629/): Information disclosure in sapphireims:sapphireims (high 7.5) - [CVE-2017-16618](https://insights.sbomify.com/CVE-2017-16618/): Unsafe deserialization in owlmixin (critical 9.8) - [CVE-2017-16616](https://insights.sbomify.com/CVE-2017-16616/): Unsafe pyyaml load usage in PyAnyAPI (critical 9.8) - [CVE-2017-16615](https://insights.sbomify.com/CVE-2017-16615/): Unsafe deserialization in MLAlchemy (critical 9.8) - [CVE-2017-16614](https://insights.sbomify.com/CVE-2017-16614/): Server-side request forgery in tp-shop:tpshop (critical 9.8) - [CVE-2017-16613](https://insights.sbomify.com/CVE-2017-16613/): OpenStack Swauth object/proxy server writing Auth Token to log file (critical 9.8) - [CVE-2017-16612](https://insights.sbomify.com/CVE-2017-16612/): Integer overflow in canonical:ubuntu linux (high 7.5) - [CVE-2017-16611](https://insights.sbomify.com/CVE-2017-16611/): Other in canonical:ubuntu linux (medium 5.5) - [CVE-2017-16610](https://insights.sbomify.com/CVE-2017-16610/): Path traversal in NetGain Systems Enterprise Manager (critical 9.8) - [CVE-2017-16609](https://insights.sbomify.com/CVE-2017-16609/): Path traversal in NetGain Systems Enterprise Manager (high 7.5) - [CVE-2017-16608](https://insights.sbomify.com/CVE-2017-16608/): Command injection in NetGain Systems Enterprise Manager (critical 9.8) - [CVE-2017-16607](https://insights.sbomify.com/CVE-2017-16607/): Information disclosure in NetGain Systems Enterprise Manager (high 7.5) - [CVE-2017-16606](https://insights.sbomify.com/CVE-2017-16606/): Path traversal in NetGain Systems Enterprise Manager (high 8.8) - [CVE-2017-16605](https://insights.sbomify.com/CVE-2017-16605/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16604](https://insights.sbomify.com/CVE-2017-16604/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16603](https://insights.sbomify.com/CVE-2017-16603/): File upload in NetGain Systems Enterprise Manager (high 8.8) - [CVE-2017-16602](https://insights.sbomify.com/CVE-2017-16602/): Command injection in NetGain Systems Enterprise Manager (high 8.8) - [CVE-2017-16601](https://insights.sbomify.com/CVE-2017-16601/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16600](https://insights.sbomify.com/CVE-2017-16600/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16599](https://insights.sbomify.com/CVE-2017-16599/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16598](https://insights.sbomify.com/CVE-2017-16598/): Path traversal in NetGain Systems Enterprise Manager (high 8.8) - [CVE-2017-16597](https://insights.sbomify.com/CVE-2017-16597/): Path traversal in NetGain Systems Enterprise Manager (critical 9.8) - [CVE-2017-16596](https://insights.sbomify.com/CVE-2017-16596/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16595](https://insights.sbomify.com/CVE-2017-16595/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16594](https://insights.sbomify.com/CVE-2017-16594/): File upload in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16593](https://insights.sbomify.com/CVE-2017-16593/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16592](https://insights.sbomify.com/CVE-2017-16592/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16591](https://insights.sbomify.com/CVE-2017-16591/): Path traversal in NetGain Systems Enterprise Manager (medium 6.5) - [CVE-2017-16590](https://insights.sbomify.com/CVE-2017-16590/): Auth bypass in NetGain Systems Enterprise Manager (high 8.8) - [CVE-2017-1659](https://insights.sbomify.com/CVE-2017-1659/): Cross-site scripting in "HCL iNotes" (medium 6.1) - [CVE-2017-16589](https://insights.sbomify.com/CVE-2017-16589/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16588](https://insights.sbomify.com/CVE-2017-16588/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16587](https://insights.sbomify.com/CVE-2017-16587/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16586](https://insights.sbomify.com/CVE-2017-16586/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16585](https://insights.sbomify.com/CVE-2017-16585/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16584](https://insights.sbomify.com/CVE-2017-16584/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16583](https://insights.sbomify.com/CVE-2017-16583/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16582](https://insights.sbomify.com/CVE-2017-16582/): Memory corruption in Foxit Reader (high 8.8) - [CVE-2017-16581](https://insights.sbomify.com/CVE-2017-16581/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16580](https://insights.sbomify.com/CVE-2017-16580/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16579](https://insights.sbomify.com/CVE-2017-16579/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16578](https://insights.sbomify.com/CVE-2017-16578/): Memory corruption in Foxit Reader (high 8.8) - [CVE-2017-16577](https://insights.sbomify.com/CVE-2017-16577/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16576](https://insights.sbomify.com/CVE-2017-16576/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16575](https://insights.sbomify.com/CVE-2017-16575/): Use after free in Foxit Reader (high 8.8) - [CVE-2017-16574](https://insights.sbomify.com/CVE-2017-16574/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16573](https://insights.sbomify.com/CVE-2017-16573/): Memory corruption in Foxit Reader (medium 6.5) - [CVE-2017-16572](https://insights.sbomify.com/CVE-2017-16572/): Memory corruption in Foxit Reader (high 8.8) - [CVE-2017-16571](https://insights.sbomify.com/CVE-2017-16571/): Memory corruption in Foxit Reader (high 8.8) - [CVE-2017-16570](https://insights.sbomify.com/CVE-2017-16570/): Cross-Site Request Forgery (CSRF) in keystone (high 8.8) - [CVE-2017-16569](https://insights.sbomify.com/CVE-2017-16569/): Open redirect in zurmo:zurmo crm (medium 4.8) - [CVE-2017-16568](https://insights.sbomify.com/CVE-2017-16568/): Cross-site scripting in logitech:media server (medium 5.4) - [CVE-2017-16567](https://insights.sbomify.com/CVE-2017-16567/): Cross-site scripting in logitech:media server (medium 5.4) - [CVE-2017-16566](https://insights.sbomify.com/CVE-2017-16566/): Auth bypass in qacctv:jooan a5 ip camera firmware (critical 9.8) - [CVE-2017-16565](https://insights.sbomify.com/CVE-2017-16565/): Cross-site request forgery in grandstream:ht802 firmware (high 8.8) - [CVE-2017-16564](https://insights.sbomify.com/CVE-2017-16564/): Cross-site scripting in grandstream:ht802 firmware (medium 5.4) - [CVE-2017-16563](https://insights.sbomify.com/CVE-2017-16563/): Cross-site request forgery in grandstream:ht802 firmware (high 8.0) - [CVE-2017-16562](https://insights.sbomify.com/CVE-2017-16562/): Auth bypass in userproplugin:userpro (critical 9.8) - [CVE-2017-16561](https://insights.sbomify.com/CVE-2017-16561/): SQL injection in ingenious school management system project:ingenious school management system (critical 9.8) - [CVE-2017-16560](https://insights.sbomify.com/CVE-2017-16560/): Information disclosure in sandisk:secureaccess (medium 4.3) - [CVE-2017-16558](https://insights.sbomify.com/CVE-2017-16558/): Contao SQL injection in the backend and listing module (critical 9.8) - [CVE-2017-16557](https://insights.sbomify.com/CVE-2017-16557/): Memory corruption in k7computing:antivirus (high 7.0) - [CVE-2017-16556](https://insights.sbomify.com/CVE-2017-16556/): Memory corruption in k7computing:antivirus (medium 5.5) - [CVE-2017-16555](https://insights.sbomify.com/CVE-2017-16555/): Memory corruption in k7computing:antivirus (high 7.0) - [CVE-2017-16554](https://insights.sbomify.com/CVE-2017-16554/): Memory corruption in k7computing:antivirus (high 7.8) - [CVE-2017-16553](https://insights.sbomify.com/CVE-2017-16553/): Memory corruption in k7computing:antivirus (high 7.0) - [CVE-2017-16552](https://insights.sbomify.com/CVE-2017-16552/): Memory corruption in k7computing:antivirus (high 7.8) - [CVE-2017-16551](https://insights.sbomify.com/CVE-2017-16551/): Memory corruption in k7computing:antivirus (high 7.0) - [CVE-2017-16550](https://insights.sbomify.com/CVE-2017-16550/): Memory corruption in k7computing:antivirus (high 7.8) - [CVE-2017-1655](https://insights.sbomify.com/CVE-2017-1655/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-16549](https://insights.sbomify.com/CVE-2017-16549/): Memory corruption in k7computing:antivirus (high 7.8) - [CVE-2017-16548](https://insights.sbomify.com/CVE-2017-16548/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2017-16547](https://insights.sbomify.com/CVE-2017-16547/): Memory corruption in graphicsmagick:graphicsmagick (high 8.8) - [CVE-2017-16546](https://insights.sbomify.com/CVE-2017-16546/): Memory corruption in canonical:ubuntu linux (high 8.8) - [CVE-2017-16545](https://insights.sbomify.com/CVE-2017-16545/): Memory corruption in graphicsmagick:graphicsmagick (high 8.8) - [CVE-2017-16544](https://insights.sbomify.com/CVE-2017-16544/): Code injection in busybox:busybox (high 8.8) - [CVE-2017-16543](https://insights.sbomify.com/CVE-2017-16543/): SQL injection in zohocorp:manageengine applications manager (critical 9.8) - [CVE-2017-16542](https://insights.sbomify.com/CVE-2017-16542/): SQL injection in zohocorp:manageengine applications manager (high 8.8) - [CVE-2017-16541](https://insights.sbomify.com/CVE-2017-16541/): Information disclosure in debian:debian linux (medium 6.5) - [CVE-2017-16540](https://insights.sbomify.com/CVE-2017-16540/): Missing authorization in open-emr:openemr (high 7.5) - [CVE-2017-1654](https://insights.sbomify.com/CVE-2017-1654/): Information disclosure in Spectrum Scale (medium 4.0) - [CVE-2017-16539](https://insights.sbomify.com/CVE-2017-16539/): Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP) (medium 5.9) - [CVE-2017-16538](https://insights.sbomify.com/CVE-2017-16538/): Race condition in linux:linux kernel (medium 6.6) - [CVE-2017-16537](https://insights.sbomify.com/CVE-2017-16537/): Null dereference in linux:linux kernel (medium 6.6) - [CVE-2017-16536](https://insights.sbomify.com/CVE-2017-16536/): Null dereference in linux:linux kernel (medium 6.6) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/83/