Browse CVEs

HIGH 9.3 CVE-2011-4851 The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates a password form field without disabling the autocomplete feature, which … Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 HIGH 9.3 CVE-2011-4854 The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Typ… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 HIGH 9.3 CVE-2011-4855 The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which mig… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 HIGH 9.3 CVE-2011-4856 The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remo… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4768 The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certai… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 HIGH 7.5 CVE-2011-4847 SQL injection vulnerability in the Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to execute arbitrary SQL co… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 MEDIUM 5.0 CVE-2011-4766 The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allows remote attackers to obtain ASP source code via a dire… Parallels Plesk Small Business Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4767 The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not inten… Parallels Plesk Small Business Panel Mitigation only Fix from $1,6002011-12-16 HIGH 10.0 CVE-2011-4755 Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which allows remo… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4757 Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for rem… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4761 Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attacke… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4762 Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 HIGH 7.5 CVE-2011-4753 Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via cr… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 HIGH 7.5 CVE-2011-4763 Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attac… Parallels Plesk Small Business Panel Mitigation only Fix from $1,9502011-12-16 MEDIUM 5.0 CVE-2011-4756 Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote … Parallels Plesk Small Business Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4758 Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive informatio… Parallels Plesk Small Business Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4759 Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query strings for client@1… Parallels Plesk Small Business Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4760 Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local applic… Parallels Plesk Small Business Panel Mitigation only Fix from $1,6002011-12-16 HIGH 10.0 CVE-2011-4739 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete feature, which… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4743 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 omits the Content-Type header's charset parameter for certain resources, which mi… Parallels Plesk Panel No fix yet Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4744 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 sends incorrect Content-Type headers for certain resources, which might allow rem… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 HIGH 10.0 CVE-2011-4749 The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 generates a password form field without disabling the autocomplete feature, wh… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16 MEDIUM 5.0 CVE-2011-4737 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a submitted password within an HTTP response body, which allows remote a… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4738 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which mak… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4741 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 includes a database connection string within a web page, which allows remote atta… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4742 The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are not intended for correspondenc… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4746 The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attack… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4747 The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 does not prevent the use of weak ciphers for SSL sessions, which makes it easi… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 MEDIUM 5.0 CVE-2011-4748 The billing system for Parallels Plesk Panel 10.3.1_build1013110726.09 has web pages containing e-mail addresses that are not intended for correspond… Parallels Plesk Panel Mitigation only Fix from $1,6002011-12-16 HIGH 10.0 CVE-2011-4732 The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 omits the Content-Type header's charset parameter for certain reso… Parallels Plesk Panel Mitigation only Fix from $1,9502011-12-16