MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdmsadmin?page=usermanage_user&id=.

Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.

An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. A parameter “error_description” fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages.

Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24.

Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name.