# Vulnerabilities published in 2017


- [CVE-2017-15306](https://insights.sbomify.com/CVE-2017-15306/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2017-15305](https://insights.sbomify.com/CVE-2017-15305/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-15304](https://insights.sbomify.com/CVE-2017-15304/): Auth bypass in airtame:hdmi dongle firmware (critical 9.8)
- [CVE-2017-15303](https://insights.sbomify.com/CVE-2017-15303/): Memory corruption in cpuid:cpu-z (high 7.8)
- [CVE-2017-15302](https://insights.sbomify.com/CVE-2017-15302/): Missing authorization in cpuid:cpu-z (high 7.8)
- [CVE-2017-15300](https://insights.sbomify.com/CVE-2017-15300/): Denial of service in ewbf:cuda zcash miner (medium 5.3)
- [CVE-2017-1530](https://insights.sbomify.com/CVE-2017-1530/): Cross-site scripting in Business Process Manager Advanced (medium 5.4)
- [CVE-2017-15299](https://insights.sbomify.com/CVE-2017-15299/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2017-15298](https://insights.sbomify.com/CVE-2017-15298/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-15297](https://insights.sbomify.com/CVE-2017-15297/): Auth bypass in sap:host agent (high 7.5)
- [CVE-2017-15296](https://insights.sbomify.com/CVE-2017-15296/): Cross-site request forgery in sap:customer relationship management (high 8.8)
- [CVE-2017-15295](https://insights.sbomify.com/CVE-2017-15295/): Auth bypass in sap:point of sale xpress server (critical 9.8)
- [CVE-2017-15294](https://insights.sbomify.com/CVE-2017-15294/): Cross-site scripting in sap:customer relationship management (medium 6.1)
- [CVE-2017-15293](https://insights.sbomify.com/CVE-2017-15293/): Auth bypass in sap:point of sale xpress server (critical 9.8)
- [CVE-2017-15291](https://insights.sbomify.com/CVE-2017-15291/): Cross-site scripting in tp-link:tl-mr3220 firmware (medium 6.1)
- [CVE-2017-15290](https://insights.sbomify.com/CVE-2017-15290/): Information disclosure in mirasys:video management system (high 7.5)
- [CVE-2017-15289](https://insights.sbomify.com/CVE-2017-15289/): Memory corruption in qemu:qemu (medium 6.0)
- [CVE-2017-15288](https://insights.sbomify.com/CVE-2017-15288/): High severity vulnerability that affects org.scala-lang:scala-compiler (high 7.8)
- [CVE-2017-15287](https://insights.sbomify.com/CVE-2017-15287/): Cross-site scripting in bouqueteditor project:bouqueteditor (medium 6.1)
- [CVE-2017-15286](https://insights.sbomify.com/CVE-2017-15286/): Null dereference in sqlite:sqlite (high 7.5)
- [CVE-2017-15285](https://insights.sbomify.com/CVE-2017-15285/): File upload in qualiteam:x-cart (high 8.8)
- [CVE-2017-15284](https://insights.sbomify.com/CVE-2017-15284/): OctoberCMS Cross-Site Scripting (medium 5.4)
- [CVE-2017-15281](https://insights.sbomify.com/CVE-2017-15281/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2017-15280](https://insights.sbomify.com/CVE-2017-15280/): Umbraco CMS XXE Vulnerability (medium 5.5)
- [CVE-2017-15279](https://insights.sbomify.com/CVE-2017-15279/): Umbraco CMS vulnerable to stored XSS (medium 5.4)
- [CVE-2017-15278](https://insights.sbomify.com/CVE-2017-15278/): TeamPass Cross-Site Scripting (XSS) (medium 5.4)
- [CVE-2017-15277](https://insights.sbomify.com/CVE-2017-15277/): Information disclosure in graphicsmagick:graphicsmagick (medium 6.5)
- [CVE-2017-15276](https://insights.sbomify.com/CVE-2017-15276/): Path traversal in opentext:documentum content server (high 8.8)
- [CVE-2017-15275](https://insights.sbomify.com/CVE-2017-15275/): Information disclosure in canonical:ubuntu linux (high 7.5)
- [CVE-2017-15274](https://insights.sbomify.com/CVE-2017-15274/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2017-15273](https://insights.sbomify.com/CVE-2017-15273/): Cross-site scripting in mahara:mahara (medium 5.4)
- [CVE-2017-15272](https://insights.sbomify.com/CVE-2017-15272/): Hardcoded credentials in psftp:psftpd (medium 5.3)
- [CVE-2017-15271](https://insights.sbomify.com/CVE-2017-15271/): Use after free in psftp:psftpd (medium 5.9)
- [CVE-2017-15270](https://insights.sbomify.com/CVE-2017-15270/): Other in psftp:psftpd (medium 5.3)
- [CVE-2017-1527](https://insights.sbomify.com/CVE-2017-1527/): XML external entity in Business Process Manager Advanced (high 8.1)
- [CVE-2017-15269](https://insights.sbomify.com/CVE-2017-15269/): Server-side request forgery in psftp:psftpd (medium 4.3)
- [CVE-2017-15268](https://insights.sbomify.com/CVE-2017-15268/): Denial of service in qemu:qemu (high 7.5)
- [CVE-2017-15267](https://insights.sbomify.com/CVE-2017-15267/): Null dereference in gnu:libextractor (high 7.5)
- [CVE-2017-15266](https://insights.sbomify.com/CVE-2017-15266/): Denial of service in gnu:libextractor (medium 5.5)
- [CVE-2017-15265](https://insights.sbomify.com/CVE-2017-15265/): Use after free in linux:linux kernel (high 7.0)
- [CVE-2017-15264](https://insights.sbomify.com/CVE-2017-15264/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15263](https://insights.sbomify.com/CVE-2017-15263/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15262](https://insights.sbomify.com/CVE-2017-15262/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15261](https://insights.sbomify.com/CVE-2017-15261/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15260](https://insights.sbomify.com/CVE-2017-15260/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15259](https://insights.sbomify.com/CVE-2017-15259/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15258](https://insights.sbomify.com/CVE-2017-15258/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15257](https://insights.sbomify.com/CVE-2017-15257/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15256](https://insights.sbomify.com/CVE-2017-15256/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15255](https://insights.sbomify.com/CVE-2017-15255/): Memory corruption in irfanview:pdf (high 7.8)
- [CVE-2017-15254](https://insights.sbomify.com/CVE-2017-15254/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15253](https://insights.sbomify.com/CVE-2017-15253/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15252](https://insights.sbomify.com/CVE-2017-15252/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15251](https://insights.sbomify.com/CVE-2017-15251/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15250](https://insights.sbomify.com/CVE-2017-15250/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15249](https://insights.sbomify.com/CVE-2017-15249/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15248](https://insights.sbomify.com/CVE-2017-15248/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15247](https://insights.sbomify.com/CVE-2017-15247/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15246](https://insights.sbomify.com/CVE-2017-15246/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15245](https://insights.sbomify.com/CVE-2017-15245/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15244](https://insights.sbomify.com/CVE-2017-15244/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15243](https://insights.sbomify.com/CVE-2017-15243/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15242](https://insights.sbomify.com/CVE-2017-15242/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15241](https://insights.sbomify.com/CVE-2017-15241/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15240](https://insights.sbomify.com/CVE-2017-15240/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-1524](https://insights.sbomify.com/CVE-2017-1524/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-15239](https://insights.sbomify.com/CVE-2017-15239/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-15238](https://insights.sbomify.com/CVE-2017-15238/): Use after free in debian:debian linux (high 8.8)
- [CVE-2017-15236](https://insights.sbomify.com/CVE-2017-15236/): Information disclosure in tiandy:tiandy ip camera firmware (high 7.5)
- [CVE-2017-15235](https://insights.sbomify.com/CVE-2017-15235/): Auth bypass in horde:groupware (high 7.5)
- [CVE-2017-15232](https://insights.sbomify.com/CVE-2017-15232/): Null dereference in libjpeg-turbo:libjpeg-turbo (medium 6.5)
- [CVE-2017-1523](https://insights.sbomify.com/CVE-2017-1523/): Missing authorization in ibm:infosphere master data management (high 7.5)
- [CVE-2017-15228](https://insights.sbomify.com/CVE-2017-15228/): Memory corruption in irssi:irssi (high 7.5)
- [CVE-2017-15227](https://insights.sbomify.com/CVE-2017-15227/): Use after free in irssi:irssi (high 7.5)
- [CVE-2017-15226](https://insights.sbomify.com/CVE-2017-15226/): Command injection in zyxel:nbg6716 firmware (critical 9.8)
- [CVE-2017-15225](https://insights.sbomify.com/CVE-2017-15225/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-15223](https://insights.sbomify.com/CVE-2017-15223/): Denial of service in argosoft:mini mail server (medium 5.3)
- [CVE-2017-15222](https://insights.sbomify.com/CVE-2017-15222/): Memory corruption in nftp project:nftp (critical 9.8)
- [CVE-2017-15221](https://insights.sbomify.com/CVE-2017-15221/): Memory corruption in asx to mp3 converter project:asx to mp3 converter (high 7.8)
- [CVE-2017-15220](https://insights.sbomify.com/CVE-2017-15220/): Memory corruption in flexense:vx search (critical 9.8)
- [CVE-2017-1522](https://insights.sbomify.com/CVE-2017-1522/): Cross-site scripting in Content Navigator (medium 5.4)
- [CVE-2017-15219](https://insights.sbomify.com/CVE-2017-15219/): Cross-site scripting in dotcms:dotcms (medium 5.4)
- [CVE-2017-15218](https://insights.sbomify.com/CVE-2017-15218/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-15217](https://insights.sbomify.com/CVE-2017-15217/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-15216](https://insights.sbomify.com/CVE-2017-15216/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2017-15215](https://insights.sbomify.com/CVE-2017-15215/): Cross-site scripting in shaarli project:shaarli (medium 6.1)
- [CVE-2017-15214](https://insights.sbomify.com/CVE-2017-15214/): Cross-site scripting in flyspray:flyspray (medium 5.4)
- [CVE-2017-15213](https://insights.sbomify.com/CVE-2017-15213/): Cross-site scripting in flyspray:flyspray (medium 5.4)
- [CVE-2017-15212](https://insights.sbomify.com/CVE-2017-15212/): Information disclosure in kanboard:kanboard (medium 4.3)
- [CVE-2017-15211](https://insights.sbomify.com/CVE-2017-15211/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15210](https://insights.sbomify.com/CVE-2017-15210/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-1521](https://insights.sbomify.com/CVE-2017-1521/): Cross-site scripting in ibm:bigfix platform (medium 6.1)
- [CVE-2017-15209](https://insights.sbomify.com/CVE-2017-15209/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15208](https://insights.sbomify.com/CVE-2017-15208/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15207](https://insights.sbomify.com/CVE-2017-15207/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15206](https://insights.sbomify.com/CVE-2017-15206/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15205](https://insights.sbomify.com/CVE-2017-15205/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15204](https://insights.sbomify.com/CVE-2017-15204/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15203](https://insights.sbomify.com/CVE-2017-15203/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15202](https://insights.sbomify.com/CVE-2017-15202/): Missing authorization in kanboard:kanboard (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/94/